NSE 7 - Security Operations 7.6 Architect Materials
- Question 15 Discussion
Review the incident report
Packet captures show a host maintaining periodic TLS sessions that imitate normal HTTPS traffic but run on TCP 8443 to a single external host. An analyst flags the traffic as potential command-and-control. During the same period, the host issues frequent DNS queries wit...
By: Wellknown at November 4, 2025 5:02 PM