Deck 6: Malicious Software

Question 1

The __________ is what the virus "does".

A)infection mechanism
B)trigger
C)logic bomb
D)payload

Answer 1

D

Question 2

Programmers use backdoors to debug and test programs.

Answer 2

True

Question 3

A bot propagates itself and activates itself,whereas a worm is initially
controlled from some central facility.

Answer 3

False

Question 4

A Trojan horse is an apparently useful program containing hidden code that,
when invoked,performs some harmful function.

Question 5

A virus that attaches to an executable program can do anything that the
program is permitted to do.

Question 6

The term "computer virus" is attributed to __________.

A)Herman Hollerith
B)Fred Cohen
C)Charles Babbage
D)Albert Einstein

Question 7

A logic bomb is the event or condition that determines when the payload is
activated or delivered.

Question 8

Keyware captures keystrokes on a compromised system.

Question 9

Malicious software aims to trick users into revealing sensitive personal data.

Question 10

__________ are used to send large volumes of unwanted e-mail.

A)Rootkits
B)Spammer programs
C)Downloaders
D)Auto-rooter

Question 11

E-mail is a common method for spreading macro viruses.

Question 12

Packet sniffers are mostly used to retrieve sensitive information like
usernames and passwords.

Question 13

Computer viruses first appeared in the early __________.

A)1960s
B)1970s
C)1980s
D)1990s

Question 14

Metamorphic code is software that can be shipped unchanged to a
heterogeneous collection of platforms and execute with identical semantics.

Question 15

In addition to propagating,a worm usually carries some form of payload.

Question 16

A program that is covertly inserted into a system with the intent of compromising the integrity or confidentiality of the victim's data is __________.

A)Adobe
B)Animoto
C)malware
D)Prezi

Question 17

Many forms of infection can be blocked by denying normal users the right to
modify programs on the system.

Question 18

A macro virus infects executable portions of code.

Question 19

Every bot has a distinct IP address.

Question 20

A __________ is code inserted into malware that lies dormant until a predefined condition,which triggers an unauthorized act,is met.

A)logic bomb
B)trapdoor
C)worm
D)Trojan horse

Question 21

During the __________ phase the virus is activated to perform the function for which it was intended.

Question 22

__________ is malware that encrypts the user's data and demands payment in order to access the key needed to recover the information.

A)Trojan horse
B)Ransomware
C)Crimeware
D)Polymorphic

Question 23

During the __________ the virus is idle.

A)dormant phase
B)propagation phase
C)triggering phase
D)execution phase

Question 24

The ideal solution to the threat of malware is __________.

A)identification
B)removal
C)detection
D)prevention

Question 25

A __________ attack is a bot attack on a computer system or network that causes a loss of service to users.

A)spam
B)phishing
C)DDoS
C)sniff

Question 26

Sometimes referred to as the "infection vector",the __________ is the means by which a virus spreads or propagates.

Question 27

Unsolicited bulk e-mail is referred to as __________.

A)spam
B)propagating
C)phishing
D)crimeware

Question 28

__________ is the first function in the propagation phase for a network worm.

A)Propagating
B)Fingerprinting
B)Keylogging
D)Spear phishing

Question 29

A __________ is when a user views a Web page controlled by the attacker that contains a code that exploits the browser bug and downloads and installs malware on the system without the user's knowledge or consent.

Question 30

A __________ is a collection of bots capable of acting in a coordinated manner.

Question 31

The __________ is when the virus function is performed.

A)dormant phase
B)propagation phase
C)triggering phase
D)execution phase

Question 32

__________ code refers to programs that can be shipped unchanged to a heterogeneous collection of platforms and execute with identical semantics.

Question 33

The four phases of a typical virus are: dormant phase,triggering phase,execution phase and __________ phase.

Question 34

__________ will integrate with the operating system of a host computer and monitor program behavior in real time for malicious actions.

A)Fingerprint-based scanners
B)Behavior-blocking software
C)Generic decryption technology
D)Heuristic scanners

Question 35

A computer __________ is a piece of software that can "infect" other programs or any type of executable content and tries to replicate itself.

Question 36

Sometimes known as a "logic bomb",the __________ is the event or condition that determines when the payload is activated or delivered.

Question 37

A __________ uses macro or scripting code,typically embedded in a document and triggered when the document is viewed or edited,to run and replicate itself into other such documents.

A)boot sector infector
B)file infector
C)macro virus
D)multipartite virus

Question 38

A _________ is a set of programs installed on a system to maintain covert access to that system with administrator (root)privileges while hiding evidence of its presence.

Question 39

A __________ virus is explicitly designed to hide itself from detection by anti-virus software.

Question 40

A __________ uses multiple methods of infection or propagation to maximize the speed of contagion and the severity of the attack.

Question 41

Countermeasures for malware are generally known as _________ mechanisms because they were first developed to specifically target virus infections.

Question 42

__________ technology is an anti-virus approach that enables the anti-virus program to easily detect even the most complex polymorphic viruses and other malware,while maintaining fast scanning speeds.

Question 43

Developed by IBM and refined by Symantec,the __________ provides a malware detection system that will automatically capture,analyze,add detection and shielding,or remove new malware and pass information about it to client systems so the malware can be detected before it is allowed to run elsewhere.

Question 44

A bot can use a __________ to capture keystrokes on the infected machine to retrieve sensitive information.