QuestionQ606
Detecting Exploitation and Covert Communications ToolsWhich of the following is an effective way to detect a covert communication tunnel such as ptunnel?
- A Rejecting incoming UDP packets with source port < 1024
- B Capturing outgoing HTTP traffic at unusual times
- C Restricting ICMP port unreachables with a non-zero payload
- D Detecting ICMP packets with uncommon payloads
Community Discussion