CIS 401 - Malicious Software and Attack Vectors
questions with verified answers
3 Primary Types of Viruses Ans✓✓✓ - System Infectors
- File Infectors
- Data Infectors
Alarms & Alerts Ans✓✓✓ Responses to security events that notify personnel of a
possible security incident.
- Alerts are considered a "Red Flag" to be investigated that could or could not be
an Alarm.
- Alarms are considered an event that is unexpected and usually malicious in
nature.
Anatomy of an Attack Ans✓✓✓
Architecture of Malware Ans✓✓✓ Malware can include infected files of known
and wanted programs as well as Potentially Unwanted Programs (PUPs) that get
installed without the user's knowledge or awareness.
Baselines Ans✓✓✓ Include trending in normal usage in essential in security
monitoring and to recognize something as abnormal.
Benefits of written Attack Prevention Policies Ans✓✓✓ - Change behavior so that
security becomes an integral part of the organizational culture in an automatic &
continuous manner.
, - Demonstrates "Due Diligence"
- Provides guidance that can save $$
- Protect employees from fear of reprisal
Characteristics of Malware Ans✓✓✓ - Can disclose your organization's private
information (Effects Confidentiality in CIA Triad)
- Can erase or overwrite files or inflict considerable damage to storage media
(Effects Availability in CIA Triad)
- Can modify database records, either immediately or over a period of time
(Effects Integrity in CIA Triad)
Data Infectors Ans✓✓✓ Attack document files containing embedded macro
programming capabilities.
Data Loss Prevention (DLP) Ans✓✓✓ A solution which works like antivirus
programs in reverse.
Direct Attacks Ans✓✓✓ Attacks that are conducted against specific targets, or
organizations, or target classes, that is, businesses using certain hardware, OS
versions, or services can be unstructured (by script kiddies) or structured (by
individual hackers or by coordinated cyberterrorist groups)
questions with verified answers
3 Primary Types of Viruses Ans✓✓✓ - System Infectors
- File Infectors
- Data Infectors
Alarms & Alerts Ans✓✓✓ Responses to security events that notify personnel of a
possible security incident.
- Alerts are considered a "Red Flag" to be investigated that could or could not be
an Alarm.
- Alarms are considered an event that is unexpected and usually malicious in
nature.
Anatomy of an Attack Ans✓✓✓
Architecture of Malware Ans✓✓✓ Malware can include infected files of known
and wanted programs as well as Potentially Unwanted Programs (PUPs) that get
installed without the user's knowledge or awareness.
Baselines Ans✓✓✓ Include trending in normal usage in essential in security
monitoring and to recognize something as abnormal.
Benefits of written Attack Prevention Policies Ans✓✓✓ - Change behavior so that
security becomes an integral part of the organizational culture in an automatic &
continuous manner.
, - Demonstrates "Due Diligence"
- Provides guidance that can save $$
- Protect employees from fear of reprisal
Characteristics of Malware Ans✓✓✓ - Can disclose your organization's private
information (Effects Confidentiality in CIA Triad)
- Can erase or overwrite files or inflict considerable damage to storage media
(Effects Availability in CIA Triad)
- Can modify database records, either immediately or over a period of time
(Effects Integrity in CIA Triad)
Data Infectors Ans✓✓✓ Attack document files containing embedded macro
programming capabilities.
Data Loss Prevention (DLP) Ans✓✓✓ A solution which works like antivirus
programs in reverse.
Direct Attacks Ans✓✓✓ Attacks that are conducted against specific targets, or
organizations, or target classes, that is, businesses using certain hardware, OS
versions, or services can be unstructured (by script kiddies) or structured (by
individual hackers or by coordinated cyberterrorist groups)
