nerdexam
EC-Council

312-85 · Question #36

Which of the following components refers to a node in the network that routes the traffic from a workstation to external command and control server and helps in identification of installed malware…

The correct answer is B. Gateway. Gateway is correct because it acts as the entry/exit point between a local network and external networks, routing traffic from workstations to outside destinations - including command and control (C2) servers used by malware. Security tools monitor gateway traffic to detect…

Threat Intelligence Analysis

Question

Which of the following components refers to a node in the network that routes the traffic from a workstation to external command and control server and helps in identification of installed malware in the network?

Options

  • ARepeater
  • BGateway
  • CHub
  • DNetwork interface card (NIC)

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    89% (32)
  • C
    6% (2)
  • D
    3% (1)

Explanation

Gateway is correct because it acts as the entry/exit point between a local network and external networks, routing traffic from workstations to outside destinations - including command and control (C2) servers used by malware. Security tools monitor gateway traffic to detect suspicious outbound connections that reveal malware infections.

  • Repeater (A) only amplifies signals to extend network range; it doesn't route or inspect traffic.
  • Hub (C) broadcasts data to all connected devices on a local segment but has no routing intelligence or external connectivity.
  • NIC (D) is the hardware adapter that connects a single device to a network; it handles local transmission, not routing between networks.

Memory tip: Think of a Gateway as the "gatekeeper" of your network - all traffic going in or out must pass through it, making it the ideal choke point for catching malware "calling home" to a C2 server.

Topics

#Network Components#Command and Control (C2)#Malware Detection#Gateway Functionality

Community Discussion

No community discussion yet for this question.

Full 312-85 Practice