Refer to the Exhibit

question 100

Multiple Choice

Refer to the exhibit. An engineer is analyzing this Vlan0392-int12-239.pcap file in Wireshark after detecting a suspicious network activity. The origin header for the direct IP connections in the packets was initiated by a google chrome extension on a WebSocket protocol. The engineer checked message payloads to determine what information was being sent off-site but the payloads are obfuscated and unreadable. What does this STIX indicate?

• A) The extension is not performing as intended because of restrictions since ports 80 and 443 should be accessible
• B) The traffic is legitimate as the google chrome extension is reaching out to check for updates and fetches this information
• C) There is a possible data leak because payloads should be encoded as UTF-8 text
• D) There is a malware that is communicating via encrypted channels to the command and control server

---

Definitions:

Atlantic and Pacific Oceans

Two major global bodies of water, with the Atlantic Ocean separating the Americas from Europe and Africa, and the Pacific Ocean separating Asia and Australia from the Americas.

Magellan

Ferdinand Magellan was a Portuguese explorer who led the first expedition to circumnavigate the globe, proving the world was round and vast, and opening new navigation routes.

Circumnavigated

The act of traveling all the way around the world, either by ship, aircraft, or other means.

Protestant Reformation

A religious movement in the 16th century that led to the creation of Protestantism, challenging the practices and authority of the Roman Catholic Church.