200-201 Question 156
Single answerA cybersecurity analyst discovers that an attacker is using an encrypted communication channel to exfiltrate data from a compromised host. Which of the following techniques is the attacker most likely employing?
- A
Tunneling
- B
Encryption
- C
Proxies
- D
Steganography
Show answer and explanation
Correct answer: B
Explanation
The attacker is using encryption to secure the communication channel, making it difficult for the cybersecurity analyst to intercept or analyze the data. This is a common evasion technique where attackers leverage encryption to obscure the content of their exfiltrated data and avoid detection by network monitoring tools.
- A. Incorrect.
Tunneling refers to encapsulating one protocol within another to bypass network security measures, but it does not necessarily involve encrypting traffic.
- B. Correct.
Encryption is the process of encoding information to prevent unauthorized access, which is likely being used in this scenario to secure the communication channel and evade detection.
- C. Incorrect.
Proxies are used to route traffic through intermediary servers to hide the origin of the connection, but they do not inherently encrypt the data being transmitted.
- D. Incorrect.
Steganography involves hiding information within other data formats, such as images or audio files, and does not apply to encrypted communication channels in this context.