Cert Master

KT-NET Beaconing

Proxy logs show 64-byte HTTPS posts every 60 seconds to a rare domain for one host. Interpretation?

Multiple choice — select one answer

Answer choices

  1. a. Typical video streaming adaptive bitrate behavior from a browser tab, without security or identity team coordination per policy.
  2. b. Benign telemetry unless more than ten thousand hosts show the pattern
  3. c. Sign that patch management failed on printers in the finance VLAN
  4. d. Possible command-and-control beacon deserving host isolation and PCAP capture

Architectural breakdown & explanation

Regular small periodic callbacks are classic beaconing indicators.

Correct answer(s): d. Possible command-and-control beacon deserving host isolation and PCAP capture

Exam domain: Beaconing (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Network Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications