Study. uk . com
  1. Home
  2. All questions
  3. Question 423

CompTIA Security+ study material · question 423 of 611

Why does analysing outbound traffic often reveal an intrusion the perimeter missed?

  1. Firewalls do not inspect outbound traffic
  2. Command and control requires the compromised host to communicate out
  3. Exfiltration always uses non-standard ports
  4. Outbound traffic is never encrypted
Show the answer

Answer: B. Command and control requires the compromised host to communicate out

The adversary must direct the compromised system, so the channel back out is a durable detection opportunity.

Challenge yourself on this topic → Study as cards