Question $60$

$1$ pts

What covert tunnel investigation strategy did the authors fail to mention?

$q,$

Inspect traffic looking for recognizable content in unexpected places

Inspect traffic looking for unexpected values in protocol fields

Extract and reconstruct identified covert channel traffic

Track an identified covert channel to its endpoint residing within the enterprise and analyze the endpoint software