NSVT MOD 4 STUDY GUIDE
Quarantine - Answer -This gives the administrator the chance to research the file to
identify whether or not the file is a threat.
False Positive - Answer -There are occasions when a file or program may exhibit
behavior or coding that triggers a signature or behavior alert from an anti-malware
system
Signature - Answer -An algorithm or hash that is unique to a specific attack method or
virus
Behavior - Answer -Monitoring for real time malicious activities from programs or files
Virus - Answer -A program that attaches itself to a file or another program. It cannot
stand-alone.
Worm - Answer -A program that replicates and propagates itself without having to
attach itself to a file or program.
Trojan Horse - Answer -A harmful program that disguises itself as a useful program in
hopes that the computer operator will initiate the application
Spyware - Answer -A malicious program that send information from the infected
computer back to the person who initiated the program
Adware - Answer -This often displays itself to the user in hopes of determining the
user's purchasing habits for web browser advertisements.
Keyloggers - Answer -Hardware devices or software that is used to capture keystrokes
with the purpose of gaining passwords and login information.
Auto-Protect scans - Answer -These scans do not scan for other threats, such as
spyware and adware.
Scanning Items On-Access - Answer -Examines files on a computer as they are
accessed.
Scanning Items On-Demand - Answer -Uses two methods of scanning; In memory
process scanning and incremental or resumable scanning.
-HTML
-PDF
-CSV - Answer -Report format choices for summary report.
, SMSME(Symantec Mail Security for Microsoft Exchange) - Answer -Expires near the
end of each fiscal year.
Privilege Escalation - Answer -These things can cause what?
- Error by an administrator assigning permissions to users who do not require them.
- Weak password policy results in an attacker cracking an administrator's password
- Bad coding in software
Four types of Trojans & Backdoors - Answer -- Remote Access Trojan
- Data Sending Trojan
- Destructive Trojan
- Proxy Trojans
Remote Access Trojan - Answer -A remote access Trojan provides full or partial access
to the victim's system
Data Sending Trojan - Answer -This type sends data such as key strokes, passwords,
or cookies to the attacker via email or a back door
Destructive Trojan - Answer -These types cause havoc like deleting files, corrupting the
OS, or crashing the entire system.
Proxy Trojan - Answer -This sort of Trojan is used as a jumping point for an attack on
another system in order to mask the attacker's identity.
DoS(Denial of Service) - Answer -This attack is to deny legitimate users from accessing
information or services.
-Unusually slow network performance
-Unavailability of a particular website
Dramatic increase in spam received in your email - Answer -Signs that you are being a
victim of a DoS attack
Admin account - Answer -This should only be used for ADMIN STUFF.
User account - Answer -Used by admins for NORMAL LEVEL STUFF.
Server & Workstation - Answer -Windows two operating systems are...
GPEDIT.MSC - Answer -What is the command to open the Group Policy console?
Computer configuration
User configuration - Answer -GPO Editor separates the local computer policy into these
two sections...
Quarantine - Answer -This gives the administrator the chance to research the file to
identify whether or not the file is a threat.
False Positive - Answer -There are occasions when a file or program may exhibit
behavior or coding that triggers a signature or behavior alert from an anti-malware
system
Signature - Answer -An algorithm or hash that is unique to a specific attack method or
virus
Behavior - Answer -Monitoring for real time malicious activities from programs or files
Virus - Answer -A program that attaches itself to a file or another program. It cannot
stand-alone.
Worm - Answer -A program that replicates and propagates itself without having to
attach itself to a file or program.
Trojan Horse - Answer -A harmful program that disguises itself as a useful program in
hopes that the computer operator will initiate the application
Spyware - Answer -A malicious program that send information from the infected
computer back to the person who initiated the program
Adware - Answer -This often displays itself to the user in hopes of determining the
user's purchasing habits for web browser advertisements.
Keyloggers - Answer -Hardware devices or software that is used to capture keystrokes
with the purpose of gaining passwords and login information.
Auto-Protect scans - Answer -These scans do not scan for other threats, such as
spyware and adware.
Scanning Items On-Access - Answer -Examines files on a computer as they are
accessed.
Scanning Items On-Demand - Answer -Uses two methods of scanning; In memory
process scanning and incremental or resumable scanning.
-HTML
-CSV - Answer -Report format choices for summary report.
, SMSME(Symantec Mail Security for Microsoft Exchange) - Answer -Expires near the
end of each fiscal year.
Privilege Escalation - Answer -These things can cause what?
- Error by an administrator assigning permissions to users who do not require them.
- Weak password policy results in an attacker cracking an administrator's password
- Bad coding in software
Four types of Trojans & Backdoors - Answer -- Remote Access Trojan
- Data Sending Trojan
- Destructive Trojan
- Proxy Trojans
Remote Access Trojan - Answer -A remote access Trojan provides full or partial access
to the victim's system
Data Sending Trojan - Answer -This type sends data such as key strokes, passwords,
or cookies to the attacker via email or a back door
Destructive Trojan - Answer -These types cause havoc like deleting files, corrupting the
OS, or crashing the entire system.
Proxy Trojan - Answer -This sort of Trojan is used as a jumping point for an attack on
another system in order to mask the attacker's identity.
DoS(Denial of Service) - Answer -This attack is to deny legitimate users from accessing
information or services.
-Unusually slow network performance
-Unavailability of a particular website
Dramatic increase in spam received in your email - Answer -Signs that you are being a
victim of a DoS attack
Admin account - Answer -This should only be used for ADMIN STUFF.
User account - Answer -Used by admins for NORMAL LEVEL STUFF.
Server & Workstation - Answer -Windows two operating systems are...
GPEDIT.MSC - Answer -What is the command to open the Group Policy console?
Computer configuration
User configuration - Answer -GPO Editor separates the local computer policy into these
two sections...
