Knowledge CheckPass mark 80%+200 XP

Module 4 Assessment — Part A: Network Reading

Pass mark 80%1 / 3

Two hosts each make a periodic encrypted connection. One is a legitimate update client, one is a C2 beacon. Which single fact most reliably separates them?

A.That the traffic is periodic — only beacons repeatB.A named SNI with a valid CA certificate vs no SNI with a self-signed oneC.The port numberD.That one uses more total bytes