CompTIA Security Exam Practice Questions Sample SY0 501 Q445

A cybersecurity analyst is looking into the payload of a random packet capture file that was selected for analysis. The analyst notices that an internal host had a socket established with another internal host over a non-standard port.
Upon investigation, the origin host that initiated the socket shows this output:

Given the above output, which of the following commands would have established the questionable socket?

A. traceroute
B. ping -1 30 -a 600
C. nc -1 -p 9856
D. pskill pid 9487

Correct Answer: C