nerdexam
GIAC

GCIH · Question #577

After reviewing your firewall logs for the past week, you notice that a specific workstation is surfing the Internet at the same time every night when employees would not be on the network. You dig fu

Sign in or unlock GCIH to reveal the answer and full explanation for question #577. The question stem and answer options stay visible for context.

Malware Analysis & Advanced Persistent Threats

Question

After reviewing your firewall logs for the past week, you notice that a specific workstation is surfing the Internet at the same time every night when employees would not be on the network. You dig further and notice that the source port is greater than 1024 and the destination port is 80. Which of the following programs could be the cause of this suspicious traffic?

Options

  • APTunnel
  • BParos Proxy
  • CCovert TCP
  • DReverse WWW Shell

Unlock GCIH to see the answer

You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#reverse shell#C2 communication#covert channel#port 80
Full GCIH Practice