GIAC
GCIH · Question #484
What capability does a GRE tunnel provide to a bot herder communicating with his bots?
The correct answer is C. VPN-like IP packet transfers. GRE tunnels are point-to-point, stateless, and enencrypted. They encapsulate and transfer packets from a source to a destination without the packets creating the tracks they would leave if they were sent outside the tunnel, obscuring where the packets originated.
Malware Analysis & Advanced Persistent Threats
Question
What capability does a GRE tunnel provide to a bot herder communicating with his bots?
Options
- AEncrypted payloads
- BPoint-to-multipoint transmissions
- CVPN-like IP packet transfers
- DStateful connections
How the community answered
(47 responses)- A4% (2)
- C94% (44)
- D2% (1)
Explanation
GRE tunnels are point-to-point, stateless, and enencrypted. They encapsulate and transfer packets from a source to a destination without the packets creating the tracks they would leave if they were sent outside the tunnel, obscuring where the packets originated.
Topics
#GRE tunnel#botnet C2#network tunneling#bot herder
Community Discussion
No community discussion yet for this question.