Certified Ethical Hacker (CEH) Practice Question

The traffic characteristics match MQTT. MQTT's default transport is TCP port 1883, and its control packets include PUBLISH and SUBSCRIBE operations that implement a publish/subscribe model. The protocol was intentionally designed to keep packet headers extremely small and minimize network bandwidth usage, which is critical for low-bandwidth or high-latency links often found in IoT deployments. While reduced power draw can be a side benefit, the specification explicitly cites minimal bandwidth and device resource requirements as its core objective. CoAP normally runs over UDP port 5683 and follows a REST-like request/response pattern, not publish/subscribe. AMQP is a richer, higher-overhead protocol that operates over TCP, and XMPP relies on verbose XML stanzas, making both less attractive for very constrained devices.