Module 3: Cyber Incident Response questions with
accurate answers
Common Symptoms of Host Infection Ans✓✓✓Important to be aware
of signs of a security issue such as malware infection on a PC & how to
troubleshoot & prevent future occurrences
Even when following the best practices of ensuring systems are patched
& updated there are still means for which viruses & other malicious
code can find their way into a system
Common Symptoms of Host Infection:
System Files & Applications OR user files Ans✓✓✓Have been
renamed OR hidden may be a sign that a system may be infected with
malware
Confirming whether file & folder settings are set to unhide will
determine if they were actually deleted by the malware OR just hidden
Common Symptoms of Host Infection: Browser Redirection
Ans✓✓✓Legitimate function that can be leveraged to spread viruses
Maybe used to allow multiple URLS to be linked to a one website OR
used to send visitors of an old site to a new site
,YET this can be used maliciously by changing one character
inconspicuously in the URL & taking users to a spoof site where they
proceed as normal entering credentials & other private information
Sometimes this is clear that this system has been infected like a notice
from the Anti-virus application OR the system being completely
unusable
Common Symptoms of Host Infection: Event Viewer Ans✓✓✓Also a
resource for monitoring system events
Event viewer logs can be searched for specific event types OR dates
System Logs also a good source for identifying unusual activity if a
computer is suspected
Common Symptoms of Host Infection: Irregularities Ans✓✓✓Are
noticed, open the system task manager inspect applications & service is
running on the system
Anything running that suspicious research purpose online
Common Symptoms of Host Infection: Phishing Attacks
Ans✓✓✓Unsolicited Spam Email is one of the most common &
successful means for infecting a computer OR stealing information
,These appear to be legitimately meant for the user & convinces the users
to act on the message within the email by clicking a link OR visiting a
website where personal information is requested OR malicious software
is downloaded & installed
Common Symptoms of Host Infection: Pop-ups Ans✓✓✓Are a
common source for viruses
Small windows that open without the user's consent when they're using a
web browser
Theses are used by advertisers to solicit a product OR service & by
malicious actors who are trying to entice users into clicking a link within
the pop up window
Can be disabled if they're still occurring after being disabled it could be
a sign the system is infected
Common Symptoms of Host Infection: Prevention: Awareness
Ans✓✓✓One of the most critical preventative measures for malware
infection is user awareness
Users are the weakest link in system security & need to be regularly
educated on potential threats, especially techniques for which malware is
contracted & spread
, Common Symptoms of Host Infection: Prevention: Least Privilege
Ans✓✓✓Practicing the principle of assigning ONLY the permissions
necessary to perform a specific job role can protect against infection
because regular user accounts WON'T have the privileges needed to
install software OR system changes
Common Symptoms of Host Infection: Remediate Ans✓✓✓Infected
system by updating anti-malware software with the latest signatures
Ensure the software is set to update automatically because one common
reason malware attacks are successful is because automatic updates is
not enabled
This is the same for system updates & patches, both
should be set to automatically update regularly
After the updates are applied scan the system & remove any malicious
files
Once the malware has been removed enable system restore & create a
new restore point
Run a full back up of the system to an external storage device as a
secondary safety measure
accurate answers
Common Symptoms of Host Infection Ans✓✓✓Important to be aware
of signs of a security issue such as malware infection on a PC & how to
troubleshoot & prevent future occurrences
Even when following the best practices of ensuring systems are patched
& updated there are still means for which viruses & other malicious
code can find their way into a system
Common Symptoms of Host Infection:
System Files & Applications OR user files Ans✓✓✓Have been
renamed OR hidden may be a sign that a system may be infected with
malware
Confirming whether file & folder settings are set to unhide will
determine if they were actually deleted by the malware OR just hidden
Common Symptoms of Host Infection: Browser Redirection
Ans✓✓✓Legitimate function that can be leveraged to spread viruses
Maybe used to allow multiple URLS to be linked to a one website OR
used to send visitors of an old site to a new site
,YET this can be used maliciously by changing one character
inconspicuously in the URL & taking users to a spoof site where they
proceed as normal entering credentials & other private information
Sometimes this is clear that this system has been infected like a notice
from the Anti-virus application OR the system being completely
unusable
Common Symptoms of Host Infection: Event Viewer Ans✓✓✓Also a
resource for monitoring system events
Event viewer logs can be searched for specific event types OR dates
System Logs also a good source for identifying unusual activity if a
computer is suspected
Common Symptoms of Host Infection: Irregularities Ans✓✓✓Are
noticed, open the system task manager inspect applications & service is
running on the system
Anything running that suspicious research purpose online
Common Symptoms of Host Infection: Phishing Attacks
Ans✓✓✓Unsolicited Spam Email is one of the most common &
successful means for infecting a computer OR stealing information
,These appear to be legitimately meant for the user & convinces the users
to act on the message within the email by clicking a link OR visiting a
website where personal information is requested OR malicious software
is downloaded & installed
Common Symptoms of Host Infection: Pop-ups Ans✓✓✓Are a
common source for viruses
Small windows that open without the user's consent when they're using a
web browser
Theses are used by advertisers to solicit a product OR service & by
malicious actors who are trying to entice users into clicking a link within
the pop up window
Can be disabled if they're still occurring after being disabled it could be
a sign the system is infected
Common Symptoms of Host Infection: Prevention: Awareness
Ans✓✓✓One of the most critical preventative measures for malware
infection is user awareness
Users are the weakest link in system security & need to be regularly
educated on potential threats, especially techniques for which malware is
contracted & spread
, Common Symptoms of Host Infection: Prevention: Least Privilege
Ans✓✓✓Practicing the principle of assigning ONLY the permissions
necessary to perform a specific job role can protect against infection
because regular user accounts WON'T have the privileges needed to
install software OR system changes
Common Symptoms of Host Infection: Remediate Ans✓✓✓Infected
system by updating anti-malware software with the latest signatures
Ensure the software is set to update automatically because one common
reason malware attacks are successful is because automatic updates is
not enabled
This is the same for system updates & patches, both
should be set to automatically update regularly
After the updates are applied scan the system & remove any malicious
files
Once the malware has been removed enable system restore & create a
new restore point
Run a full back up of the system to an external storage device as a
secondary safety measure
