An analyst notices there is an internal device sending HTTPS traffic with additional characters in the header to a known-malicious IP in another country. Which of the following describes what the…

Beaconing refers to a compromised system periodically sending outbound communications to a command and control (C2) server, often disguised as legitimate traffic like HTTPS but with anomalies or covert data in headers. The description of 'additional characters in the header' to a 'known-malicious IP' strongly indicates this type of covert C2 communication.

Cross-site scripting (XSS) is a web vulnerability where malicious scripts are injected into trusted websites to target users' browsers, which does not fit the description of an internal device communicating with a malicious IP.

A buffer overflow is a software vulnerability that occurs when a program attempts to write data beyond its allocated buffer, often leading to crashes or code execution, not a description of network traffic patterns.

PHP traversal (or Path Traversal) is a web vulnerability allowing access to restricted directories and files by manipulating file paths, which is unrelated to an internal device sending specific traffic patterns to a malicious IP.