I've been trying to solve a homework question in a beginner infosec class, and I was stumped on an issue and I didn't really know of the right place to ask. If it isn't then please let me know.
Given the following ports,
if somebody was developing malware, which would be the most likely to be used by it to bypass the firewall?
I know that 53 and 443 are DNS and HTTPS respectively.
My way of thinking about the problem is that it's likely a firewall would be set up to not drop incoming HTTPS traffic so that would be the best one to develop malware for, but I feel like there's possibly a trick to the question I'm missing. Also it's probably possible to eliminate UDP 8080 because it falls out of the commonly used UDP service range, meaning it's likely to be blocked by default.
Any insight or explanation would be helpful. Thanks!