WGU C845 TASK 3 AND SSCP CYBER
CERTIFICATION EVALUATION EXAM
◉Domains that provide the framework for IT security best practice.
(Malicious Code Naming Conventions). Answer: -access control
systems and methodologies
-application and system development security
-business continuity and disaster recovery planning
-cryptography, and
-law, investigation, and ethics
operations security
-physical security
-security architecture and models
,-security management practices, and
-telecommunication and network security
◉CIA. Answer: -Confidentiality
-Integrity
-Availability
◉CARO
(Malicious Code Naming Conventions). Answer: Computer AntiVirus
Research Organization
◉What are the parts of a CARO malcode name?
(Malicious Code Naming Conventions). Answer:
Platform.Type.Family _Name.Variant[:Modifier]@Suffix.
◉Examples of Platform names
(Malicious Code Naming Conventions). Answer: BASH
HLP (Helpfile)
JS
MAC
,O97M (Microsoft Office97)
PPT (Powerpoint)
VBS (Visual Basic)
WNT (Windows NT)
X97M (Excel 97)
Platform may not be included, so name would start with Type
◉Type
(Malicious Code Naming Conventions). Answer: Ex. Trojan, worm,
virus, bot, logic bomb
◉Family Name
(Malicious Code Naming Conventions). Answer: -can be chosen
based on the target of specific malcode, the binary strings, or even
text linked to the author.
-No particular standard
◉Variant
(Malicious Code Naming Conventions). Answer: -identifies the
member of a particular family. It's also known as an identifier.
, -is usually assigned a particular letter, in the range from A to Z.
◉@Suffix
(Malicious Code Naming Conventions). Answer: -identifies the
method that malcode uses to spread.
-Ex. @m = mailing, @mm = mass mailing
◉Cross-Referencing tools
(Malicious Code Naming Conventions). Answer: -Common Malware
Enumeration (CME)
-Public Multiscanners
-VGrep
◉Viruses
(Types of Malcode). Answer: malicious programs that generally
spread from one infected file to another
◉Worms
(Types of Malcode). Answer: harmful programs that spread by
rapidly making copies of themselves and forwarding these to
CERTIFICATION EVALUATION EXAM
◉Domains that provide the framework for IT security best practice.
(Malicious Code Naming Conventions). Answer: -access control
systems and methodologies
-application and system development security
-business continuity and disaster recovery planning
-cryptography, and
-law, investigation, and ethics
operations security
-physical security
-security architecture and models
,-security management practices, and
-telecommunication and network security
◉CIA. Answer: -Confidentiality
-Integrity
-Availability
◉CARO
(Malicious Code Naming Conventions). Answer: Computer AntiVirus
Research Organization
◉What are the parts of a CARO malcode name?
(Malicious Code Naming Conventions). Answer:
Platform.Type.Family _Name.Variant[:Modifier]@Suffix.
◉Examples of Platform names
(Malicious Code Naming Conventions). Answer: BASH
HLP (Helpfile)
JS
MAC
,O97M (Microsoft Office97)
PPT (Powerpoint)
VBS (Visual Basic)
WNT (Windows NT)
X97M (Excel 97)
Platform may not be included, so name would start with Type
◉Type
(Malicious Code Naming Conventions). Answer: Ex. Trojan, worm,
virus, bot, logic bomb
◉Family Name
(Malicious Code Naming Conventions). Answer: -can be chosen
based on the target of specific malcode, the binary strings, or even
text linked to the author.
-No particular standard
◉Variant
(Malicious Code Naming Conventions). Answer: -identifies the
member of a particular family. It's also known as an identifier.
, -is usually assigned a particular letter, in the range from A to Z.
◉@Suffix
(Malicious Code Naming Conventions). Answer: -identifies the
method that malcode uses to spread.
-Ex. @m = mailing, @mm = mass mailing
◉Cross-Referencing tools
(Malicious Code Naming Conventions). Answer: -Common Malware
Enumeration (CME)
-Public Multiscanners
-VGrep
◉Viruses
(Types of Malcode). Answer: malicious programs that generally
spread from one infected file to another
◉Worms
(Types of Malcode). Answer: harmful programs that spread by
rapidly making copies of themselves and forwarding these to
