1

Question 1

Harmful programs used to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems are commonly referred to as:

• Adware
• Malware
• Ransomware
• Spyware

Answer 1

Malware

Question 2

Which of the following statements apply to the definition of a computer virus? (Select 3 answers)

• A self-replicating computer program containing malicious segment.
• Requires its host application to be run to make the virus active.
• A standalone malicious computer program that replicates itself over a computer network.
• Can run by itself without any interaction.
• Attaches itself to an application program or other executable component.
• A self-contained malicious program or code that does need a host to propagate itself.

Answer 2

• A self-replicating computer program containing malicious segment.
• Requires its host application to be run to make the virus active.
• Attaches itself to an application program or other executable component.

Question 3

Which of the terms listed below refers to an example of a crypto-malware?

Backdoor
Ransomware
Keylogger
Rootkit

Answer 3

Ransomware

Question 4

Malware that restricts access to a computer system by encrypting files or locking the entire system down until the user performs requested action is known as:

Grayware
Adware
Ransomware
Spyware

Answer 4

Ransomware

Question 5

A standalone malicious computer program that typically propagates itself over a computer network to adversely affect system resources and network bandwidth is called:

Spyware
Worm
Trojan
Spam

Answer 5

Worm

Question 6

A type of software that performs unwanted and harmful actions in disguise of a legitimate and useful program is known as a Trojan horse. This type of malware may act like a legitimate program and have all the expected functionalities, but apart from that it will also contain a portion of malicious code that the user is unaware of.

True
False

Answer 6

True

Question 7

A collection of software tools used by a hacker to mask intrusion and obtain administrator-level access to a computer or computer network is known as:

Rootkit
Spyware
Backdoor
Trojan

Answer 7

Rootkit

Question 8

Which of the following answers lists an example of spyware?

Keylogger
Vulnerability scanner
Computer worm
Packet sniffer

Answer 8

Keylogger

Akeyloggeris a technology that tracks and records consecutive key strokes on a keyboard. Because sensitive information such as usernames and passwords are often entered on a keyboard, akeyloggercan be a very dangerous technology.Keyloggersare often part of malware, spyware or an external virus.

Question 9

What is adware?

Unsolicited or undesired electronic messages.
Malicious program that sends copies of itself to other computers on the network.
Software that displays advertisements.
Malicious software that collects information about users without their knowledge.

Answer 9

Software that displays advertisements.

Question 10

Malicious software collecting information about users without their knowledge/consent is known as:

Crypto-malware
Adware
Ransomware
Spyware

Answer 10

Spyware

Question 11

A malware-infected networked host under remote control of a hacker is commonly referred to as:

Trojan
Worm
Bot
Honeypot

Answer 11

Bot

Question 12

Which type of Trojan enables unauthorized remote access to a compromised system?

pcap
RAT
MaaS
pfSense

Answer 12

RAT

A remote access Trojan (RAT) is a malware program that includes a back door for administrative control over the target computer.RATsare usually downloaded invisibly with a user-requested program – such as a game – or sent as an email attachment.

Question 13

Malicious code activated by a specific event is called:

Backdoor
Logic bomb
Dropper
Retrovirus

Answer 13

Logic bomb

Question 14

Which of the following answers refers to an undocumented (and often legitimate) way of gaining access to a program, online service, or an entire computer system?

Logic bomb
Trojan horse
Rootkit
Backdoor

Answer 14

Backdoor

Question 15

An unauthorized practice of obtaining confidential information by manipulating people into disclosing sensitive data is referred to as:

Shoulder surfing
Privilege escalation
Social engineering
Penetration testing

Answer 15

Social engineering

Question 16

A fraudulent email requesting its recipient to reveal sensitive information (e.g. user name and password) used later by an attacker for the purpose of identity theft is an example of: (Select all that apply)

• Phishing
• Watering hole attack
• Social engineering
• Bluejacking
• Vishing

Answer 16

Phishing

Question 17

A social engineering technique whereby attackers under disguise of legitimate request attempt to gain access to confidential information they shouldn’t have access to is commonly referred to as:

• Phishing
• Privilege escalation
• Backdoor access
• Shoulder surfing

Answer 17

Phishing

Question 18

Phishing scams targeting a specific group of people are referred to as:

• Vishing
• Spear phishing
• Spoofing
• Whaling

Answer 18

Spear phishing

Question 19

Phishing scams targeting people holding high positions in an organization or business are known as:

Vishing
Bluesnarfing
Whaling
Bluejacking
Pharming

Answer 19

Whaling

Question 20

The practice of using a telephone system to manipulate user into disclosing confidential information is called:

• Whaling
• Spear phishing
• Vishing
• Pharming

Answer 20

Vishing

Question 21

What is tailgating?
* Acquiring unauthorized access to confidential data.
* Looking over someone’s shoulder to get information.
* Gaining unauthorized access to restricted areas by following another person.
* Manipulating a user into disclosing confidential information.

Answer 21

Gaining unauthorized access to restricted areas by following another person.

Question 22

Which social engineering attack relies on identity theft?

• Impersonation
• Dumpster diving
• Watering hole attack
• Shoulder surfing

Answer 22

Impersonation

Question 23

“In computer security, the term ““Dumpster diving”” is used to describe a practice of sifting through trash for discarded documents containing sensitive data. Found documents containing names and surnames of the employees along with the information about positions held in the company and other data can be used to facilitate social engineering attacks. Having the documents shredded or incinerated before disposal makes dumpster diving less effective and mitigates the risk of social engineering attacks.”

True
False

Answer 23

True

Question 24

A situation in which an unauthorized person can view another user’s display or keyboard to learn their password or other confidential information is referred to as:

• Spear phishing
• Tailgating
• Shoulder surfing
• Spoofing

Answer 24

Shoulder surfing