MENU
An analyst notices there is an internal device sending HTTPS traffic with additional characters in the header to a known-malicious IP in another country. Which of the following describes what the analyst has noticed?
Suggested Answer: A
Get Premium CS0-003 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
22 comments · newest first
LA
Lashawn
2 days ago
Agreed, the extra characters suggest it's trying to communicate.
ER
Erick
8 days ago
This looks like beaconing to me.
YE
Yesenia
13 days ago
Buffer overflow is unlikely too. It’s about communication.
KR
Kristal
18 days ago
Cross-site scripting doesn’t fit here.
SY
Sylvia
23 days ago
Yeah, beaconing makes sense. It’s trying to communicate.
DA
Davida
28 days ago
I think it’s suspicious. Extra characters in the header?
LA
Lashunda
1 month ago
Agreed, it’s definitely beaconing.
HA
Hayley
1 month ago
This looks like beaconing to me.
MI
Mindy
1 month ago
Wow, I didn't know HTTPS could be exploited like that!
CE
Celestine
2 months ago
I thought cross-site scripting was more common for this?
JE
Jerry
2 months ago
Wait, are we sure it’s not a buffer overflow?
AB
Abraham
2 months ago
Definitely A, that’s classic behavior.
MA
Marva
2 months ago
Sounds like beaconing to me.
SH
Sharen
2 months ago
Wait, are we sure it's not something else?
MI
Micaela
2 months ago
Yeah, I agree, it's probably beaconing.
MI
Mindy
3 months ago
I thought buffer overflow was more about memory issues?
LE
Leontine
3 months ago
Definitely not cross-site scripting!
CY
Cyril
3 months ago
Sounds like beaconing to me.
KR
Kristian
3 months ago
Buffer overflow sounds familiar, but I don't think it fits this scenario. I feel like beaconing is the best choice, though.
LU
Lucy
3 months ago
Cross-site scripting doesn't seem right here, but I'm not completely confident about the other options.
BE
Benedict
4 months ago
I remember practicing a question about unusual traffic patterns, and I think beaconing was mentioned as a potential sign of compromise.
RE
Renea
5 months ago
I think this might be related to beaconing since it involves communication with a known-malicious IP. But I'm not entirely sure.