Quiz 1 - Malicious Software

In the CIA Triad, "Confidentiality" means ensuring that data is:

• available and that people can access it

• not accessible by unwanted parties

• accessible anonymously

• accurate and was not tampered with

In the CIA Triad, "Integrity" means ensuring that data is:

• available and that people can access it

• not accessible by unwanted parties

• trhuthful and honest

• accurate and was not tampered with

In the CIA Triad, "Availability" means ensuring that data is:

• available to anyone from anywhere

• not accessible by unwanted parties

• available and people can access it

• accurate and was not tampered with

What's the relationship between a vulnerability and an exploit?

• An exploit takes advantages of a vulnerability to run arbitrary code or gain access

• A vulnerability takes advantages of an exploit to run arbitrary code or gain access

• They're unrelated

• An exploit creates a vulnerability in a system

Which statement is true for both a worm and a virus?

• They don't cause any harm to the target system.

• They're self-replicating and self-propagating.

• They're undetectable by antimalware software.

• They infect other files with malicious code.

Check all examples of types of malware:

• Adware

• Worms

• Key Generators

• Viruses

What are the characteristics of a rootkit? Check all that apply.

• Provides elevated credentials

• Is harmless

• is difficult to detect

• Is destructive

What are the dangers of a man-in-the-middle attack? Check all that apply.

• An attacker can destroy data at rest

• An attacker can modify traffic in transit

• An attacker can eavesdrop on unencrypted traffic

• An attacker can block or redirect traffic

Why is a DNS cache poisoning attack dangerous? Check all that apply.

• It allows an attacker to redirect targets to malicious webservers

• It allows an attacker to remotely control your computer

• Errr...it's not actually dangerous

• It affects any clients querying the poisoned DNS server

Which of the following is true of a DDoS attack?

• Attack traffic comes from lots of different hosts

• This type of attack causes a significant loss of data

• Attack traffic is encrypted

• An attacker sends attack traffic directly to the target