Covert_TCP will use which of the following byte offsets on the TCP header to carry ASCII data?

The correct answer is A. Byte offset 8-11. Covert_TCP allows for transmitting information by entering ASCII data in the following TCP - TCP initial sequence number - TCP acknowledgement sequence number The image reveals that these fields are in Byte offsets 4-7 and 8-11.

Malware Analysis & Advanced Persistent Threats

Question

Exhibit

Options

AByte offset 8-11
BByte offset 20-23
CByte offset 14 and 15
DByte offset 18 and 19

How the community answered

(33 responses)

A
88% (29)
B
3% (1)
C
3% (1)
D
6% (2)

Explanation

Covert_TCP allows for transmitting information by entering ASCII data in the following TCP - TCP initial sequence number - TCP acknowledgement sequence number The image reveals that these fields are in Byte offsets 4-7 and 8-11.

Topics

#Covert_TCP#TCP header offsets#covert channel#data exfiltration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice