GIAC
GCIH · Question #484
GCIH Question #484: Real Exam Question with Answer & Explanation
The correct answer is C: VPN-like IP packet transfers. GRE tunnels are point-to-point, stateless, and enencrypted. They encapsulate and transfer packets from a source to a destination without the packets creating the tracks they would leave if they were sent outside the tunnel, obscuring where the packets originated.
Malware Analysis & Advanced Persistent Threats
Question
What capability does a GRE tunnel provide to a bot herder communicating with his bots?
Options
- AEncrypted payloads
- BPoint-to-multipoint transmissions
- CVPN-like IP packet transfers
- DStateful connections
Explanation
GRE tunnels are point-to-point, stateless, and enencrypted. They encapsulate and transfer packets from a source to a destination without the packets creating the tracks they would leave if they were sent outside the tunnel, obscuring where the packets originated.
Topics
#GRE tunnel#botnet C2#network tunneling#bot herder
Community Discussion
No community discussion yet for this question.