Chapter 11: Drawing Conclusions from the Data

1. (2)
   HTTP is not a secure method of bulk data transfer. Data transferred over HTTP is sent in plaintext. HTTPS is a better and more secure protocol, and there are also more efficient methods of bulk data transfer (for example, FTP).
   DNS and HTTP are fundamental to many network applications and therefore are likely to be enabled on corporate networks. This gives data relating to an incident a greater likelihood of successfully entering or leaving the network. This data will also be masked by the large volume of legitimate traffic.
   DNS allows attackers to create code that doesn't directly reference the destination IP address. They can use a domain name or URL, which can then be registered closer to the time of deployment.

2. (3)
   Utilizing a public internet location (for example, public Wi-Fi or internet cafés) doesn't do...