QuestionQ34

Network Intrusion Analysis

Question Image

Refer to the exhibit. A network administrator is examining captured traffic to investigate suspicious network activity. An engineer observes abnormal behavior and finds that the default user agent appears in the headers of requests and transmitted data. What is happening?

Explanation

Data exfiltration can be performed through HTTP requests, often using POST requests to transmit data while blending into normal web traffic. A default user-agent header can reveal an automated or malicious HTTP client rather than a normal browser.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!