A user reports their system is slow.
Nopal Securities technical mcq question, verified with a worked answer. Free to practise - no sign-up.
A user reports their system is slow. Network logs show multiple outbound connections to unknown IP addresses on port 4444. What could this traffic indicate?
Show answer & explanation
Answer: A. Command & Control (C2) communication
Port 4444 is the default listener port for the Metasploit payload handler and commonly indicates reverse shell or C2 traffic.
Step-by-step Derivation:
Step 1: Port 4444 is widely recognized as the default port for Metasploit reverse TCP shells.
Step 2: Persistent outbound traffic on this port indicates an active remote access backdoor communicating with Command and Control infrastructure.