300-215 · Question #32
Refer to the exhibit. A cybersecurity analyst is presented with the snippet of code used by the threat actor and left behind during the latest incident and is asked to determine its type based on…
The correct answer is A. simple client-side script for downloading other elements. The snippet uses Python’s socket library to open a TCP connection to a web server (port 80), send an HTTP GET request, and read back the server’s response - behavior characteristic of a simple client program pulling (downloading) content.
Question
Refer to the exhibit. A cybersecurity analyst is presented with the snippet of code used by the threat actor and left behind during the latest incident and is asked to determine its type based on its structure and functionality. What is the type of code being examined?
Exhibit
Options
- Asimple client-side script for downloading other elements
- Bbasic web crawler for indexing website content
- Cnetwork monitoring script for capturing incoming traffic
- Dsocket programming listener for TCP/IP communication
How the community answered
(16 responses)- A75% (12)
- B6% (1)
- C13% (2)
- D6% (1)
Explanation
The snippet uses Python’s socket library to open a TCP connection to a web server (port 80), send an HTTP GET request, and read back the server’s response - behavior characteristic of a simple client program pulling (downloading) content.
Topics
Community Discussion
No community discussion yet for this question.