Which TCP header field is used by Covert_TCP to conceal ASCII data?

The correct answer is A. Sequence Number. Covert_TCP allows for transmitting information by entering ASCII data in the following TCP - TCP initial sequence number - TCP acknowledgement sequence number

Malware Analysis & Advanced Persistent Threats

Question

Exhibit

Options

ASequence Number
BUrgent Pointer
CTCP Options
DWindow Size

How the community answered

(21 responses)

A
95% (20)
C
5% (1)

Explanation

Covert_TCP allows for transmitting information by entering ASCII data in the following TCP - TCP initial sequence number - TCP acknowledgement sequence number

Topics

#Covert_TCP#TCP sequence number#covert channel#data exfiltration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice