Mentoring Security Chapter 4

1. An employee calls IT personnel and states that they received an email with a PDF document to review. After the PDF was opened, the system has not been performing correctly. An IT admin conducted a scan and found a virus. Determine the two classes of viruses the computer most likely has. (Select all that apply.)

• Macro

• Program

• Script

• Boot sector

Which of the following depict ways a malicious attacker can gain access to a target's network? (Select all that apply.)

• Shoulder surfing

• Mantrap

• Ethical hacking

• Phishing

3. A tech concludes that a user's PC is infected with a virus that appears to be a memory resident and loads anytime the operating system is restarted. Examine the options and determine which describes the infection type

• Monitors local application activity

• Uses a local scripting engine

• Written to the partition table of a fixed disk

• Replicates over network resources

4. Which situation would require keyboard encryption software be installed on a computer?

• To protect against spyware

• To set up single sign-on privileges

• To comply with input validation practices

• For the purpose of key management

A gaming company decides to add software on each title it releases. The company's objective is to require the CD to be inserted during use. This software will gain administrative rights, change system files, and hide from detection without the knowledge or consent of the user. Consider the malware characteristics and determine which is being used.

• Rootkit

• Trojan

• Spyware

• Keylogger