click below
click below
Normal Size Small Size show me how
Security+ Chapter 3
Security+ Chapter 3 Review Questions
| Question | Answer |
|---|---|
| What is malware? | The term malware describes a wide range of software that is intentionally designed to cause harm to systems and devices, networks, or users |
| What is ransomware? | Ransomware is malware that takes over a computer then demands a ransom or payment. |
| What control should organizations put in place to ensure that successful ransomware infections do not incapacitate the company? | One of the most important defenses against ransomware is an effective backup system that stores files in a separate location that will not be impacted if the system or device it backs up is infected and encrypted by ransomware. |
| What’s the difference between Trojans and worms? | What’s the difference between Trojans and worms? |
| What are rootkits? | Rootkits are malware that is specifically designed to allow attackers to access a system through a backdoor. |
| What is the best way to detect a rootkit? | The best way to detect a rootkit is to test the suspected system from a trusted system or device. In cases where that isn’t possible, rootkit detection tools look for behaviors and signatures that are typical of rootkits. |
| What are backdoors? | Backdoors are methods or tools that provide access that bypasses normal authentication and authorization procedures, allowing attackers access to systems, devices, or applications. |
| What are bots and what are botnets? | Bots are remotely controlled systems or devices that have a malware infection. Groups of bots are known as botnets, and botnets are used by attackers who control them to perform various nefarious actions. |
| Name two models that many botnet command and control (C&C) systems operate in. | Client/server botnet control model and peer-to-peer botnet control model |
| What are keyloggers? | Keyloggers are programs that capture keystrokes from keyboards, although keylogger applications may also capture other input like mouse movement, touchscreen inputs, or credit card swipes from attached devices. |
| What key element separates logic bombs from other malware? | Logic bombs are functions or code that are placed inside of other programs that will activate when set conditions are met instead of independent malicious programs. |
| Name at least three types of viruses. | Memory resident viruses, non-memory resident viruses, boot sector viruses, macro viruses, and email viruses |
| List three basic actions you can take now as a security analyst in response to the increase in the importance of AI and machine learning in cybersecurity. | 1. Understand the quality and security of source data. 2. Ensure that changes to AI and ML algorithms are reviewed, tested, and documented. 3. Encourage reviews to prevent intentional or unintentional bias in algorithms. |