ExamGecko
Question list
Search
Search

Question 19 - PCCET discussion

Report
Export

Which technique changes protocols at random during a session?

A.
use of non-standard ports
Answers
A.
use of non-standard ports
B.
port hopping
Answers
B.
port hopping
C.
hiding within SSL encryption
Answers
C.
hiding within SSL encryption
D.
tunneling within commonly used services
Answers
D.
tunneling within commonly used services
Suggested answer: B

Explanation:

Port hopping is a technique that changes protocols at random during a session to evade detection and analysis by security devices. Port hopping can be used by malware or attackers to communicate with command and control servers or to exfiltrate data. Port hopping makes it difficult to identify and block malicious traffic based on port numbers or signatures.Reference:Port Hopping,Ports Used for Management Functions,Adding a Custom Application/Ports to Security Policy

asked 23/09/2024
Francesco D'Agostino
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first