A security analyst notices that a compromised workstation is making periodic HTTPS requests to a domain that was recently registered and has no other web content. The requests contain encoded data in the URL path. The analyst suspects the workstation is under remote control. Which term best describes the role of the external server?

Command and control (C2) server

CiscoCertified CyberOps Associate

Domain 2Objective 8

2.8 Describe Endpoint-Based Attacks, Such as Buffer Overflows, Command and Control (C2), Malware, and Ransomware 200-201 Practice Questions (Page 11)

Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

25%of the exam

Questions 51–51

51application · medium
A security analyst notices that a compromised workstation is making periodic HTTPS requests to a domain that was recently registered and has no other web content. The requests contain encoded data in the URL path. The analyst suspects the workstation is under remote control. Which term best describes the role of the external server?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.

2.8 Describe Endpoint-Based Attacks, Such as Buffer Overflows, Command and Control (C2), Malware, and Ransomware 200-201 Practice Questions (Page 11)

Questions 51–51

Keep studying — 2.0 Security Monitoring