ITF+ Quiz Part 40

Part of host hardening is to reduce the attack surface. What configuration changes does reducing the attack surface involve?

• Increasing the number of open ports

• Disabling unnecessary services

• Installing more software

• Allowing all network traffic

Answer explanation

Reducing the attack surface involves disabling unnecessary services, not increasing open ports, installing more software, or allowing all network traffic.

What is the main difference between virus and worm malware?

• Viruses can replicate themselves, worms cannot

• Worms require user action to spread, viruses do not

• Worms can replicate themselves and spread without user action, viruses require user action

• Viruses are always harmful, worms are not

Answer explanation

Worms can replicate themselves and spread without user action, viruses require user action

How might malware hosted on a website be able to infect your computer simply by your browsing the site?

• By sending an email to your inbox

• By exploiting vulnerabilities in your browser

• By requiring you to download a file

• By asking for your password

Answer explanation

By exploiting vulnerabilities in your browser

How might spyware be able to steal a password?

• By encrypting your files

• By logging keystrokes

• By sending spam emails

• By displaying pop-up ads

Answer explanation

Spyware can steal a password by logging keystrokes, capturing the keys pressed by the user, including passwords entered.

What type of malware is being described? The malware encrypts the user's documents folder and any attached removable disks then extorts the user for money to release the encryption key.

• Virus

• Worm

• Ransomware

• Spyware

Answer explanation

The described malware encrypts user files and demands payment for decryption, indicating it is Ransomware.

Most anti-virus software can remediate a system by blocking access to an infected file but not actually deleting it. True or false?

• True

• False

Answer explanation

Most anti-virus software can remediate a system by blocking access to an infected file but not actually deleting it, making the statement true.

What is the main means by which anti-virus software identifies infected files?

• By checking file size

• By scanning for known signatures

• By monitoring network traffic

• By analyzing user behavior

Answer explanation

By scanning for known signatures is the main means by which anti-virus software identifies infected files.

What are the two main ways that spam might expose recipients to hazardous content?

• By sending large attachments

• By including malicious links and attachments

• By using a lot of images

• By being sent from unknown addresses

Answer explanation

The two main ways that spam might expose recipients to hazardous content are by including malicious links and attachments.

Your friend sent you an email link, which you have opened, and now the browser is asking whether you should install a plug-in to view all the content on the page. Should you proceed?

• Yes, because it is from a friend

• No, because it could be malicious

• Yes, if the plug-in is from a reputable source

• No, because plug-ins are unnecessary

Answer explanation

No, because it could be malicious

An OEM site is a reputable source of management software and drivers for a particular system. True or false?

• True

• False

Answer explanation

An OEM site is indeed a reputable source of management software and drivers for a particular system, making the statement true.