nerdexam
EC-Council

312-50V9 · Question #126

A botnet can be managed through which of the following?

The correct answer is A. IRC. IRC (Internet Relay Chat) is the historically primary protocol used by attackers to issue commands to compromised machines in a botnet.

Malware Threats

Question

A botnet can be managed through which of the following?

Options

  • AIRC
  • BE-Mail
  • CLinkedin and Facebook
  • DA vulnerable FTP server

How the community answered

(43 responses)
  • A
    88% (38)
  • B
    7% (3)
  • C
    2% (1)
  • D
    2% (1)

Why each option

IRC (Internet Relay Chat) is the historically primary protocol used by attackers to issue commands to compromised machines in a botnet.

AIRCCorrect

IRC was the original and most common command-and-control (C2) channel for botnets because its real-time chat protocol allows a bot herder to join a private channel and broadcast commands to all infected hosts simultaneously. The protocol is lightweight, widely available, and supports pseudonymous operation, making it ideal for covert botnet management. Early botnets like EggDrop and later malware families like SDBot were built explicitly around IRC-based C2 infrastructure.

BE-Mail

While email has been used in some botnet designs for C2 communication, it is not the primary or most common mechanism and is far less efficient than IRC for real-time command broadcasting.

CLinkedin and Facebook

Social media platforms like LinkedIn and Facebook are not standard or reliable botnet C2 channels, as they are easily monitored and accounts are subject to takedown.

DA vulnerable FTP server

A vulnerable FTP server is a target for exploitation or a staging area for malware payloads, not a management channel used to issue commands to a botnet.

Concept tested: Botnet command-and-control via IRC

Source: https://www.cisa.gov/sites/default/files/publications/Botnets_Threat_Overview.pdf

Topics

#botnet#IRC#C2 channel#malware communication

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice