Which method is used by some malware to transfer files from infected hosts to a threat actor host?
- UDP infiltration
- ICMP tunneling
- HTTPS traffic encryption
- iFrame injection
Explanation: ICMP traffic from inside the company is also a threat. Some varieties of malware use ICMP packets to transfer files from infected hosts to threat actors via ICMP tunneling.
Related exam: Modules 24 - 25: Protocols and Log Files Group Exam
Related exam: Network Defense - Checkpoint Exam: Evaluating Security Alerts Answers
Related exam: Cybersecurity Essentials - Checkpoint Exam: Evaluating Security Alerts (Module 19 – 21 Exam)
