🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Malware Quiz 4 (10 MCQs)

This set of multiple-choice questions evaluates understanding of malware types, administrator-level access, and cybersecurity terms. It tests the ability to identify harmful software, distinguish between security tools and threats, and comprehend concepts like rootkits, drive-by downloads, and unauthorized access. The questions cover system harm, information transmission, and user activity monitoring.

Quiz Instructions

Select an option to see the correct answer instantly.

1. It gains entry into a system and monitors the user activity without his knowledge and then reveals the collected information to another interested party.

Correct Answer: Correct answer is: (A) Spyware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Spyware is a type of malware that secretly monitors user activity and collects information without the user's knowledge. It then transmits this information to another party.

Common Mistakes: A common mistake is confusing spyware with ransomware. While both are types of malware, they have different primary functions.

Explanations: Spyware gains entry into a system and monitors user activity without the user's knowledge. It collects information such as keystrokes, browsing habits, and personal data, and then transmits this information to another interested party. This matches the description given in the question.

Option Analysis:

Option A: Spyware is the correct answer as it fits the description of gaining entry into a system, monitoring user activity, and transmitting collected information to another party.
Option B: Ransomware is incorrect because it primarily encrypts files and demands a ransom for their release, rather than monitoring and transmitting user data.

Mnemonic: S-P-Y: Secretly Prying on You

2. It is designed to destroy a computer.

Correct Answer: Correct answer is: (C) Malware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Malware is a type of software designed to harm, steal data, or cause damage to a computer system.

Common Mistakes: A common misunderstanding is that the internet, YouTube, or Yahoo Mail are inherently harmful. However, these are platforms or services, not malicious software.

Explanations: Malware is specifically designed to cause harm to a computer system, which aligns with the question's description of something designed to destroy a computer. The other options (Internet, YouTube, Yahoo Mail) are not designed to destroy computers; they are platforms or services that can be used for various purposes.

Option Analysis:

Option A: The Internet is a global network of computers and servers, not designed to destroy computers.
Option B: YouTube is a video-sharing platform, not designed to destroy computers.
Option C: Malware is specifically designed to cause harm to a computer system.
Option D: Yahoo Mail is an email service, not designed to destroy computers.

3. What is a threat to the end user regarding web scripting?

Correct Answer: Correct answer is: (B) The web script may deliver malware without the user's knowledge.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Web scripting can be used to deliver malware to a user's system without their awareness. This is a significant threat because users may unknowingly execute malicious scripts that can harm their system or steal sensitive information.

Common Mistakes: A common misunderstanding is that web scripts are always safe and that users are always aware of the scripts running on their browsers. However, malicious scripts can be embedded in seemingly harmless websites and can execute without the user's explicit consent.

Explanations: Web scripts, such as JavaScript, can be used to deliver malware to a user's system. Malicious scripts can be embedded in web pages and can execute automatically when a user visits the site. This can lead to the installation of malware without the user's knowledge, posing a significant threat to the user's system security and privacy.

Option Analysis:

Option A: This option is incorrect because it refers to access denial, which is not a threat related to malware delivery through web scripts.
Option B: This option is correct because it accurately describes the threat of malware delivery through web scripts without the user's knowledge.
Option C: This option is incorrect because it describes a normal function of web scripts, not a threat.
Option D: This option is incorrect because it refers to a security policy that may prevent client-side scripting, but it does not describe a threat related to malware delivery.

4. Viruses, Trojan horses and worms are

Correct Answer: Correct answer is: (A) Able to harm computer system.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Viruses, Trojan horses, and worms are types of malware that can cause harm to computer systems.

Common Mistakes: A common misunderstanding is that these types of malware are harmless or user-friendly applications.

Explanations: Viruses, Trojan horses, and worms are malicious software designed to cause harm to computer systems. They can damage files, steal sensitive information, and disrupt normal operations. Therefore, they are not harmless applications and are not user-friendly.

Option Analysis:

Option A: Correct. Viruses, Trojan horses, and worms are designed to harm computer systems.
Option B: Incorrect. These types of malware can often be detected by antivirus software.
Option C: Incorrect. These are not user-friendly applications; they are malicious software.
Option D: Incorrect. These types of malware are harmful, not harmless.

5. When you visit certain Web sites spyware may be automatically downloaded. This is known as .....

Correct Answer: Correct answer is: (C) Drive-by download.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Drive-by download refers to the automatic download of malware when a user visits a compromised website.

Common Mistakes: A common misunderstanding is that spyware can only be downloaded through direct user action, such as clicking on a malicious link or downloading a suspicious file.

Explanations: Drive-by download occurs when a user visits a website that has been compromised with malicious code. This code can automatically download and install spyware or other malware onto the user's device without any direct action from the user. This method is particularly dangerous because it can happen without the user's knowledge or consent.

Option Analysis:

Option A: Spybot is a type of anti-spyware software, not a method of malware distribution.
Option B: A logic bomb is a piece of code that is set to execute under certain conditions, not a method of automatic malware download.
Option C: Drive-by download is the correct term for the automatic download of malware when visiting a compromised website.
Option D: This option is incorrect as the correct answer is provided in option C.

Mnemonic: Drive-by-download: "Drive-by" for automatic, "download" for malware.

6. Records activities of the user, such as the password they type into the computer, and transmits this information to the person who wrote the malware.

Correct Answer: Correct answer is: (A) Spyware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Spyware is a type of malware that records user activities and transmits this information to the attacker.

Common Mistakes: A common mistake is confusing spyware with other types of malware, such as viruses or trojans, which have different primary functions.

Explanations: Spyware is designed to monitor and record user activities, such as keystrokes, passwords, and other sensitive information, and then transmit this data to the attacker. This matches the description given in the question.

Option Analysis:

Option A: Correct. Spyware records user activities and transmits the information to the attacker.
Option B: Incorrect. Smishing is a form of phishing that uses SMS text messages to trick users into providing sensitive information.
Option C: Incorrect. Vishing is a form of phishing that uses voice calls to trick users into providing sensitive information.
Option D: Incorrect. A DNS server translates domain names into IP addresses and is not a type of malware.

7. The term ..... refers to malicious programs designed with the intention to affect the normal functionality by causing harm to the system, or with the intention of getting unauthorized access to the system, or denying access to legitimate users of computing resources.

Correct Answer: Correct answer is: (A) Malware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Malware refers to malicious software designed to harm, steal data, or disrupt the normal operation of a system.

Common Mistakes: A common misunderstanding is that antivirus software is the same as malware. Antivirus software is designed to detect and remove malware, not to be malware itself.

Explanations: Malware is the correct term for malicious programs designed to harm systems, steal data, or deny access to legitimate users. Antivirus software, on the other hand, is designed to protect against such malicious programs.

Option Analysis:

Option A: Correct. Malware is the term for malicious software.
Option B: Incorrect. Antivirus software is designed to protect against malware, not to be malware itself.
Option C: Incorrect. Both options cannot be correct as they have different functions.
Option D: Incorrect. Malware is the correct term for the described malicious programs.

8. Which of the following is a type of harmful software?

Correct Answer: Correct answer is: (D) Malware.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Malware is a type of harmful software designed to damage, disrupt, or gain unauthorized access to computer systems.

Common Mistakes: A common mistake is confusing phishing with malware. Phishing is a method of tricking individuals into providing sensitive information, while malware is software that can harm a system.

Explanations: Malware is the correct answer because it is a type of harmful software. Phishing, firewall, and VPN are not types of harmful software. Phishing is a social engineering attack, a firewall is a security system that monitors and controls incoming and outgoing network traffic, and a VPN is a service that creates a secure connection over a less secure network.

Option Analysis:

Option A: Phishing is a method of tricking individuals into providing sensitive information, not a type of harmful software.
Option B: A firewall is a security system that monitors and controls network traffic, not a type of harmful software.
Option C: A VPN is a service that creates a secure connection over a network, not a type of harmful software.
Option D: Malware is a type of harmful software designed to damage, disrupt, or gain unauthorized access to computer systems.

9. ..... is a collection of tools that are used to obtain administrator-level access to a computer or a network of computers.

Correct Answer: Correct answer is: (C) Rootkit.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A rootkit is a collection of tools used to gain administrator-level access to a computer or network of computers.

Common Mistakes: A common misunderstanding is that a rootkit is a type of virus or worm, but it is actually a set of tools used to maintain access and hide the presence of malware.

Explanations: A rootkit is designed to provide administrator-level access to a system, allowing the attacker to control the system without being detected. This makes it a powerful tool for maintaining access and hiding malicious activities. Rootkits are not viruses or worms themselves, but they can be used in conjunction with other types of malware to enhance their capabilities.

Option Analysis:

Option A: A computer worm is a type of malware that can replicate itself and spread to other computers without user intervention. It is not a collection of tools for gaining administrator-level access.
Option B: Malicious spyware is software designed to gather information from a user's system without their knowledge. It does not provide administrator-level access.
Option C: A rootkit is a collection of tools used to obtain administrator-level access to a computer or network of computers, making it the correct answer.
Option D: Scareware is a type of malware that tricks users into believing their system is infected and prompts them to purchase a fake antivirus solution. It does not provide administrator-level access.

Mnemonic: R-O-O-T-K-I-T: Remember, Obtain, Operate, Tools, Keep, In, Tact.

10. A malware program that can be used by a black hat cracker to remotely take control of a system for further attacks like spam emails or Denial of Service attacks, without a user's knowledge is called .....

Correct Answer: Correct answer is: (A) Zombie.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: A zombie is a type of malware that allows a hacker to control a system remotely without the user's knowledge. This system can then be used for malicious activities such as sending spam emails or participating in Denial of Service (DoS) attacks.

Common Mistakes: A common misunderstanding is that "zombie" refers to a type of virus or worm, but it specifically refers to a compromised system that can be controlled remotely.

Explanations: A zombie is a compromised computer that can be controlled remotely by a hacker. This allows the hacker to use the system for various malicious activities, such as sending spam emails or participating in DoS attacks. The term "zombie" is used because the infected system is under the control of the hacker, similar to how a zombie is controlled by an external force.

Option Analysis:

Option A: Correct. A zombie is a compromised system that can be remotely controlled by a hacker for malicious activities.
Option B: Incorrect. Vishing is a form of phishing that uses voice calls to trick victims into revealing sensitive information.
Option C: Incorrect. This option is not applicable as "Zombie" is the correct term for the described scenario.
Option D: Incorrect. This option suggests that all the above are correct, which is not true.

Mnemonic: Zombie = Zoned for Zombie Operations

Frequently Asked Questions

What is malware?

Malware is harmful software designed to cause damage, steal information, or gain unauthorized access to a computer system.

How can malware be distributed?

Malware can be distributed through various methods, including email attachments, compromised websites, and drive-by downloads.

What is the purpose of spyware?

Spyware is designed to monitor user activity and collect information without the user's knowledge, often for malicious purposes.

What is a rootkit?

A rootkit is a type of malware that provides administrator-level access to a computer system, often used for remote control and data theft.

How can users protect themselves from malware?

Users can protect themselves from malware by maintaining up-to-date security software, avoiding suspicious links, and practicing good cybersecurity habits.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books