Command and Control Servers in Botnets | CCIE Security Exam Question Answer

Command and Control Servers

Prev Question Next Question


In the context of a botnet, what is true regarding a command and control server?



Click on the arrows to vote for the correct answer

A. B. C. D.


A botnet is a group of infected devices (bots) that can be remotely controlled by a command and control (C&C) server. The C&C server issues commands to the bots to perform specific tasks such as launching a DDoS attack, stealing information, or distributing spam.

Answer A is partially correct. A C&C server can use various communication channels to issue commands to the bots, including Internet Relay Chat (IRC), social media platforms like Twitter, or encrypted communication channels. However, launching an attack using IRC or Twitter is not a feature of the C&C server itself but a method of communication it may use.

Answer B is incorrect. A zombie is another term for an infected device or bot that is part of a botnet.

Answer C is incorrect. A worm is a self-replicating malware that spreads over a network without user interaction. A C&C server can be used to control and coordinate the activities of a botnet, but it does not generate a worm.

Answer D is incorrect. Adware is software that displays unwanted advertisements on a user's device. A C&C server does not send commands to bots via adware.

In summary, the correct answer is A. A C&C server can use various communication channels to issue commands to bots, including IRC or Twitter.