GIAC
GCIH · Question #577
GCIH Question #577: Real Exam Question with Answer & Explanation
Sign in or unlock GCIH to reveal the answer and full explanation for question #577. The question stem and answer options stay visible for context.
Question
After reviewing your firewall logs for the past week, you notice that a specific workstation is surfing the Internet at the same time every night when employees would not be on the network. You dig further and notice that the source port is greater than 1024 and the destination port is 80. Which of the following programs could be the cause of this suspicious traffic?
Options
- APTunnel
- BParos Proxy
- CCovert TCP
- DReverse WWW Shell
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.