Chapter 3 Questions

Gabriel's sister called him about a message that suddenly appeared on her screen that says her software license has expired and she must immediately pay $500 to have it renewed before control of the computer will be returned to her. What type of malware has infected her computer? 1. Blocking ransomware 2. Impede-ware 3. Cryptomalware 4. Persistent Lockware

Answer: 1. Blocking ransomware

What word is used today to refer to network-connected hardware devices? 1. Endpoint 2. Host 3. Client 4. Device

Answer: 1. Endpoint

Which type of malware relies on LOLBins? 1. Fileless virus 2. Bot 3. File-based virus 4. PUP

Answer: 1. Fileless virus

Which of the following manipulates the trusting relationship between web servers? 1. SSRF 2. EXMAL 3. SCSI 4. CSRF

Answer: 1. SSRF

What race condition can result in a NULL pointer/object dereference? 1. Time of check/time of use race condition 2. Value-based race condition 3. Thread race condition 4. Conflict race condition

Answer: 1. Time of check/time of use race condition

Which of the following is known as a network virus? 1. Worm 2. TAR 3. C&C 4. Remote exploitation virus (REV)

Answer: 1. Worm

Which of the following is technology that imitates human abilities? 1. RC 2. AI 3. XLS 4. ML

Answer: 2. AI

Marius's team leader has just texted him that an employee, who violated company policy by bringing in a file on her USB flash drive, has just reported that her computer is suddenly locked up with cryptomalware. Why would Marius consider this a dangerous situation? 1. It sets a precedent by encouraging other employees to violate company policy 2. Cryptomalware can encrypt all files on any network that is connected to the employee's computer 3. The employee would have to wait at least an hour before her computer could be restarted 4. The organization may be forced to pay up to $500 for the ransom

Answer: 2. Cryptomalware can encrypt all files on any network that is connected to the employee's computer

Which of the following is NOT a characteristic of malware? 1. Launch 2. Diffusion 3. Imprison 4. Decieve

Answer: 2. Diffusion

Josh is researching the different types of attacks that can be generated through a botnet. Which of the following would NOT be something distributed by a botnet? 1. Spam 2. LOL bins 3. Ad fraud 4. Malware

Answer: 2. LOL bins

What term refers to changing the design of existing code? 1. Design driver manipulation 2. Refactoring 3. Shimming 4. Library Manipulation

Answer: 2. Refactoring

Which statement regarding a keylogger is NOT true? 1. Keyloggers can be used to capture passwords, credit card numbers, or personal information 2. Software keyloggers are generally easy to detect 3. Software keyloggers can be designed to send captured information automatically back to the attacker through the internet 4. Hardware keyloggers are installed between the keyboard connector and computer keyboard USB port

Answer: 2. Software keyloggers are generally easy to detect

Randall's roommate is complaining to him about all of the software that came pre-installed on his new computer. He doesn't want the software because it slows down the computer. What type of software is this? 1. Bot 2. Spyware 3. PUP 4. Keylogger

Answer: 3. PUP

Which of the following attacks is based on a website accepting user input without sanitizing it? 1. SQLS 2. SSXRS 3. XSS 4. RSS

Answer: 3. XSS

What is the difference between a Trojan and a RAT? 1. A Trojan can carry malware while a RAT cannot 2. There is no difference 3. A RAT can infect only a smartphone and not a computer 4. A RAT gives the attacker unauthorized remote access to the victim's computer

Answer: 4. A RAT gives the attacker unauthorized remote access to the victim's computer

Which type of memory vulnerability attack manipulates the "return address" of the memory location of a software program? 1. Integer overflow attack 2. Shim overflow attack 3. Factor overflow attack 4. Buffer overflow attack

Answer: 4. Buffer overflow attack

Which of the following attacks is based on the principle that when a user is currently authenticated on a website and then loads another webpage, the new page inherits the identity and privileges of the first website? 1. DRCR 2. SSFR 3. DLLS 4. CSRF

Answer: 4. CSRF

Which of the following attacks targets the external software component that is a repository of both code and data? 1. Device driver manipulation attack 2. Application program interface (API) attack 3. OS REG attack 4. Dynamic-link library (DLL) injection attack

Answer: 4. Dynamic-link library (DLL) injection attack

Which of the following is NOT a means by which a bot communicates with a C&C device? 1. Command sent through Twitter posts 2. Signing in the third-party website 3. Signing in to a website the bot herder operates 4. Email

Answer: 4. Email

Which of these would NOT be considered the result of a logic bomb? 1. If the company's stock price drops below $50, then credit Oscar's retirement account with one additional year of retirement credit 2. Delete all human resource records regarding Augustine one month after he leaves the company 3. Erase the hard drivers of all the servers 90 days after Alfredo's name is removed from the list of current employees 4. Send an email to Rowen's inbox each Monday morning with the agenda of that week's department meeting

Answer: 4. Send an email to Rowen's inbox each Monday morning with the agenda of that week's department meeting