What is a common characteristic of a beacon between a compromised device and a command and control server?

What is a common characteristic of a beacon between a compromised device and a command and control server?
A . Use of IPv6 addressing instead of IPv4 addressing
B. Lack of encryption
C. Use of less common protocols such as SNAP
D. Periodic transmission of small, identically sized packets

Answer: D