CySA+ CS0-001 – Q. 224


A security analyst is reviewing packet captures for a specific server that is suspected of containing malware and discovers the following packets:

Which of the following traffic patterns or data would be MOST concerning to the security analyst?

A. Port used for SMTP traffic from
B. Unencrypted password sent from
C. Anonymous access granted by
D. Ports used for HTTP traffic from