ITPEC FE Morning April 2022 Question 39

A computer an attacker controls to send commands to compromised computers — the C&C server directs the bots of a botnet.

Computers infected with bot malware connect out to the C&C server, receive instructions, such as downloading more malware, sending spam, joining a DDoS attack or uploading stolen data, and report back. Because the bots start the connection, often over HTTP or HTTPS, the traffic passes most firewalls; detecting and blocking connections to known C&C addresses cuts the bots off from their commands.

Answer (a)

Why not others:

• •(b) — describes a gateway for encrypted data transfer between on-premise and cloud storage, a legitimate service.
• •(c) — describes a directory service such as a domain controller, which authenticates the organization's users and computers.
• •(d) — describes a job scheduler or load balancer in a high-performance computing cluster.

Key rule: In security, "command and control" means the attacker's infrastructure that sends instructions to compromised machines; cutting its communication disables the botnet.

Security · AI-written, may contain errors