Chapter 2

What is the name of the threat actor's computer that gives instructions to an infected computer? Command and control (C&C) server Resource server Monitoring and Infecting (M&I) server Regulating Net Server (RNS)

Command and control (C&C) server

Astrid's computer screen suddenly says that all files are now locked until money is transferred to a specific account, at which time she will receive a means to unlock the files. What type of malware has infected her computer? Crypto-malware Blocking virus Networked worm Bitcoin malware

Crypto-malware

Which of the following is defined as following an authorized person through a secure door? Caboosing Backpacking Tailgating Tagging

Tailgating

A watering hole attack is directed against which of the following? wealthy individuals attackers who send spam all users of a large corporation a smaller group of specific users

a smaller group of specific users

Which of the following is NOT a primary trait of malware? concealment diffusion circulation infection

diffusion

Each of these is a reason why adware is scorned EXCEPT _____. it can interfere with a user's productivity it can cause a computer to crash or slow down it displays the attacker's programming skills it displays objectionable content

it displays the attacker's programming skills

Which type of mutation completely changes a virus from its original form by rewriting its own code whenever it is executed? oligomorphic betamorphic metamorphic polymorphic

metamorphic

Which type of malware requires a user to transport it from one computer to another? rootkit virus worm adware

virus

How can an attacker use a hoax? Hoaxes are not used by attackers today. By sending out a hoax, an attacker can convince a user to read his email more often. A user who receives multiple hoaxes could contact his supervisor for help. A hoax could convince a user that a bad Trojan is circulating and that he should change his security settings.

A hoax could convince a user that a bad Trojan is circulating and that he should change his security settings.

Which of the following is NOT correct about a rootkit? A rootkit is always the payload of a Trojan. The risk of a rootkit is less today than previously. A rootkit accesses "lower layers" of the operating system. A rootkit is able to hide its presence or the presence of other malware.

A rootkit is always the payload of a Trojan.

Lykke receives a call while working at the helpdesk from someone who needs his account reset immediately. When Lykke questions the caller, he says, "If you don't reset my account immediately, I will call your supervisor!" What psychological approach is the caller attempting to use on Lykke? Scarcity Consensus Intimidation Familiarity

Intimidation

Ebba received a message from one of her tech support employees. In violation of company policy, a user had downloaded a free program to receive weather reports, but the program had also installed malware on the computer that gave the threat actor unrestricted access to the computer. What type of malware had been downloaded? Trojan virus ransomware RAT

RAT

Which of these could NOT be defined as a logic bomb? Send spam email to Moa's inbox on Tuesday. Erase all data if Matilda's name is removed from the list of employees. If the company's stock price drops below $100, then credit Juni's account with 10 additional years of retirement credit. Reformat the hard drive three months after Sigrid left the company.

Send spam email to Moa's inbox on Tuesday.

Which statement regarding a keylogger is NOT true? Software keyloggers are generally easy to detect. Keyloggers can be used to capture passwords, credit card numbers, or personal information. Software keyloggers can be designed to send captured information automatically back to the attacker through the Internet. Hardware keyloggers are installed between the keyboard connector and computer keyboard USB port.

Software keyloggers are generally easy to detect.

Which variation of a phishing attack sends phishing messages only to wealthy individuals? Target phishing Microing Spear phishing Whaling

Whaling

Linnea's father called her to say that a message suddenly appeared on his screen that says his software license has expired and he must immediately pay $500 to have it renewed before control of the computer will be returned to him. What type of malware is this? Trojanware persistent virusware blocking ransomware lockoutware

blocking ransomware

Which of these items retrieved through dumpster diving would NOT provide useful information? organizational charts books memos calendars

books

What is the term used for a threat actor who controls multiple bots in a botnet? cyber-robot rogue IRC bot herder zombie shepherd

bot herder

Hedda pretends to be the help desk manager and calls Steve to trick him into giving her his password. What social engineering attack has Hedda performed? aliasing luring duplicity impersonation

impersonation

Which of these is a general term used for describing software that gathers information without the user's consent? spyware scrapeware gatherware adware

spyware