What is the main difference between a worm and a virus? - ANSWER A worm can
replicate itself, while a virus requires a host for distribution.
What type of malware monitors your actions? - ANSWER Spyware
A collection of zombie computers have been set up to collect personal information. What
type of
malware do the zombie computers represent? - ANSWER Botnet
Which is a program that appears to be a legitimate application, utility, game, or screensaver
and performs malicious activities surreptitiously? - ANSWER Trojan horse
Which of the following describes a logic bomb? - ANSWER A program that performs a
malicious activity at a specific time or after a triggering
event.
Which of the following is a characteristic of a virus? - ANSWER Requires an activation
mechanism to run
Which of the following is undetectable software that allows administrator-level access? -
ANSWER Rootkit
1
,Which of the following are characteristics of a rootkit? (Select two.) -
ANSWER Requires administratorlevel privileges for installation.
Hides itself from detection
You have heard about a new malware program that presents itself to users as a virus
scanner. When users run the software, it installs itself as a hidden program that has
administrator access to various operating system components. The program then tracks
system activity and allows an attacker to remotely gain administrator access to the
computer.
Which of the following terms best describes this software? - ANSWER Rootkit
While browsing the internet, you notice that the browser displays ads that are targeted
towards recent keyword searches you have performed.
What is this an example of? - ANSWER Adware
Which of the following best describes spyware? - ANSWER It monitors the actions you
take on your machine and sends the information back to its originating source.
What is the common name for a program that has no useful purpose, but attempts to spread
itself to other systems and often damages resources on the systems where it is found? -
ANSWER Virus
What is the primary distinguishing characteristic between a worm and a logic bomb? -
ANSWER Self-replication
What is another name for a logic bomb? - ANSWER Asynchronous attack
You have installed anti-malware software that checks for viruses in email attachments. You
configure the software to quarantine any files with problems.
You receive an email with an important attachment, but the attachment is not there.
Instead, you see a message that the file has been quarantined by the anti-malware software.
2
, What has happened to the file? - ANSWER It has been moved to a secure folder on
your computer.
Which of the following measures are you most likely to implement to protect against a worm
or Trojan horse? - ANSWER Anti-virus software
Which of the following statements about the use of antivirus software is correct? -
ANSWER Antivirus software should be configured to download updated virus
definition files as soon as they become available.
If your antivirus software does not detect and remove a virus, what should you try first? -
ANSWER Update your virus detection software.
You have installed antivirus software on the computers on your network. You update the
definition and engine files and configure the software to update those files every day.
What else should you do to protect your systems from malware? (Select two.) -
ANSWER Schedule regular full system scans.
Educate users about malware
To tightly control the anti-malware settings on your computer, you elect to update the
signature file manually. Even though you vigilantly update the signature file, the machine
becomes infected with a new type of malware.
Which of the following actions would best prevent this scenario from occurring again? -
ANSWER Configure the software to automatically download the virus definition files
as soon as
they become available
You recently discovered that several key files of your antivirus program have been deleted.
You suspect that a virus has deleted the files. Which type of virus deletes key antivirus
program files? - ANSWER Retro
3
replicate itself, while a virus requires a host for distribution.
What type of malware monitors your actions? - ANSWER Spyware
A collection of zombie computers have been set up to collect personal information. What
type of
malware do the zombie computers represent? - ANSWER Botnet
Which is a program that appears to be a legitimate application, utility, game, or screensaver
and performs malicious activities surreptitiously? - ANSWER Trojan horse
Which of the following describes a logic bomb? - ANSWER A program that performs a
malicious activity at a specific time or after a triggering
event.
Which of the following is a characteristic of a virus? - ANSWER Requires an activation
mechanism to run
Which of the following is undetectable software that allows administrator-level access? -
ANSWER Rootkit
1
,Which of the following are characteristics of a rootkit? (Select two.) -
ANSWER Requires administratorlevel privileges for installation.
Hides itself from detection
You have heard about a new malware program that presents itself to users as a virus
scanner. When users run the software, it installs itself as a hidden program that has
administrator access to various operating system components. The program then tracks
system activity and allows an attacker to remotely gain administrator access to the
computer.
Which of the following terms best describes this software? - ANSWER Rootkit
While browsing the internet, you notice that the browser displays ads that are targeted
towards recent keyword searches you have performed.
What is this an example of? - ANSWER Adware
Which of the following best describes spyware? - ANSWER It monitors the actions you
take on your machine and sends the information back to its originating source.
What is the common name for a program that has no useful purpose, but attempts to spread
itself to other systems and often damages resources on the systems where it is found? -
ANSWER Virus
What is the primary distinguishing characteristic between a worm and a logic bomb? -
ANSWER Self-replication
What is another name for a logic bomb? - ANSWER Asynchronous attack
You have installed anti-malware software that checks for viruses in email attachments. You
configure the software to quarantine any files with problems.
You receive an email with an important attachment, but the attachment is not there.
Instead, you see a message that the file has been quarantined by the anti-malware software.
2
, What has happened to the file? - ANSWER It has been moved to a secure folder on
your computer.
Which of the following measures are you most likely to implement to protect against a worm
or Trojan horse? - ANSWER Anti-virus software
Which of the following statements about the use of antivirus software is correct? -
ANSWER Antivirus software should be configured to download updated virus
definition files as soon as they become available.
If your antivirus software does not detect and remove a virus, what should you try first? -
ANSWER Update your virus detection software.
You have installed antivirus software on the computers on your network. You update the
definition and engine files and configure the software to update those files every day.
What else should you do to protect your systems from malware? (Select two.) -
ANSWER Schedule regular full system scans.
Educate users about malware
To tightly control the anti-malware settings on your computer, you elect to update the
signature file manually. Even though you vigilantly update the signature file, the machine
becomes infected with a new type of malware.
Which of the following actions would best prevent this scenario from occurring again? -
ANSWER Configure the software to automatically download the virus definition files
as soon as
they become available
You recently discovered that several key files of your antivirus program have been deleted.
You suspect that a virus has deleted the files. Which type of virus deletes key antivirus
program files? - ANSWER Retro
3
