GCIH · Question #577
After reviewing your firewall logs for the past week, you notice that a specific workstation is surfing the Internet at the same time every night when employees would not be on the network. You dig…
The correct answer is D. Reverse WWW Shell. Reverse WWW Shell and Reverse HTTP Shell are synonymous terms. Reverse www shell allows an attacker to access an internal system via a command line and can be scheduled to run at a specific time. By default, the source port is set to 1024 and the destination port is 80.
Question
After reviewing your firewall logs for the past week, you notice that a specific workstation is surfing the Internet at the same time every night when employees would not be on the network. You dig further and notice that the source port is greater than 1024 and the destination port is 80. Which of the following programs could be the cause of this suspicious traffic?
Options
- APTunnel
- BParos Proxy
- CCovert TCP
- DReverse WWW Shell
How the community answered
(53 responses)- A11% (6)
- B6% (3)
- C25% (13)
- D58% (31)
Explanation
Reverse WWW Shell and Reverse HTTP Shell are synonymous terms. Reverse www shell allows an attacker to access an internal system via a command line and can be scheduled to run at a specific time. By default, the source port is set to 1024 and the destination port is 80.
Topics
Community Discussion
No community discussion yet for this question.