Question

When running a scan on your computer, you find that a session has been established with a host at the address 208.85.40.44:80. Which application layer protocol is in use for this session?

Answer 1

The answer is : Port 80 indicates this is an HTTP session.  Port 80/HTTP is the World Wide Web.   And nslookup can identify the domain name of the host at that IP address.  Port 80 is one of the most commonly used port numbers in the Transmission Control Protocol (TCP) suite. Any Web/HTTP client, such as a Web browser, uses port 80 to send and receive requested Web pages from a HTTP server.