GIAC
GPEN · Question #216
GPEN Question #216: Real Exam Question with Answer & Explanation
The correct answer is C. Back Oriffice. Back Orifice communicates over UDP by default, unlike most other common Trojans and RATs which rely on TCP.
Question
Which of the following Trojans does not use TCP protocol?
Options
- ADonald Dick
- BBeast
- CBack Oriffice
- DNetBus
Explanation
Back Orifice communicates over UDP by default, unlike most other common Trojans and RATs which rely on TCP.
Common mistakes.
- A. Donald Dick is a TCP-based RAT that uses TCP for its command-and-control communications.
- B. Beast Trojan communicates over TCP, listening on port 6666 by default.
- D. NetBus communicates over TCP, using ports 12345 and 12346 by default.
Concept tested. Trojan transport protocol identification UDP vs TCP
Community Discussion
No community discussion yet for this question.