Chapter 9

Question 1

Software Exploitation

Answer 1

Attacks launched against applications and higher-level services. Includes gaining access to data using weaknesses
300

Question 2

Rootkits

Answer 2

Software programs that have the ability to hide certain things from the operating system. Not all of the processes may show up in Task Manager
301

Question 3

Bad extensions to download in an email

Answer 3

.bat
.com
.exe
.hlp
.pif
.scr

Question 4

Ransomware

Answer 4

Takes control of the system and demands that a third party be paid. Often gains control via encrypting the hard drive or changing passwords
309

Question 5

Botnet

Answer 5

Malicious software running on a zombie computer. Generally run in the background of your computer with no visible evidence of their presence
309

Question 6

Means of spreading Viruses

Answer 6

• On contaminated media (DVD, USB)
• Through email and social networking sites
• As part of another program
  310

Question 7

Polymorphic Virus

Answer 7

Change their form to avoid detection

310

Question 8

Stealth Virus

Answer 8

Avoid detection by masking themselves from applications. They usually hide at the end of a boot section
310

Question 9

Retroviruses

Answer 9

Attack or bypass the antivirus software installed on a computer
310

Question 10

Multipartite Virus

Answer 10

Attack your system in multiple ways

310

Question 11

Armored Virus

Answer 11

Designed to make itself difficult to detect or analyze

310

Question 12

Companion Virus

Answer 12

Attaches itself to legitimate programs and then creates a program with a different filename extension
310

Question 13

Phage Virus

Answer 13

Modifies and alters programs in databases

310

Question 14

Macro Virus

Answer 14

Exploits enhansements made to many application programs, which are used by programmers to expand the capability of applications
310

Question 15

Common Symptoms of Viruses

Answer 15

Programs take longer to load
Unusual files appear on your hard drive
Program sizes change
Software exhibits unusual characteristics
System mysteriously shuts down or unexpected disk activity
Suddenly can access disk drive or other system resources
System will not reboot or gives unexpected error messages during startup
311

Question 16

SPIM

Answer 16

SPAM over instant messaging

316

Question 17

SPIT

Answer 17

SPAM over Internet Telephony

316

Question 18

Places to use antivirus software in a layered approach

Answer 18

Gateways, servers, and at the desktop

317

Question 19

XMAS Attack

Answer 19

aka christmas tree attack.

Uses Nmap to scan for open ports using three flags (FIN PSH and URG)
324

Question 20

Birthday Attack

Answer 20

If a key is hashed, the possibility that given enough time another value can be created with the same hash value
327

Question 21

Dictionary Attack

Answer 21

uses a dictionary of common words to try to guess passwords. Usually automated
327

Question 22

Rainbow Table Attack

Answer 22

Focuses on identifying a stored value by using values in the existing table of hashed phrases or words. Once it creates hashes, it compares them against encrypted values and continues until it breaks encryption
327

Question 23

Privilege Escalation

Answer 23

A user gaining more privileges that he/she should have. With the escalated permissions the user can perform task that he/she should not be allowed to do.
328

Question 24

Client side attack

Answer 24

targets vulnerabilities in client applications that interact with a malicious server. A user accesses the trusted site and unwittingly downloads the rogue code allows the attacker to install and execute malware
333

Question 25

Malicious Insider Threat

Answer 25

When a disgruntled employee sells company information

332

Question 26

Typo Squatting

Answer 26

AKA URL Hijacking

registering domains that are similar to those of a known entity but based on a misspelling or typographical error.

333

Question 27

Watering Hole Attack

Answer 27

An attacker infects a common site and lets the users infect themselves

334

Question 28

Cross-Site Scripting

Answer 28

Using a client-side scripting language an attacker can trick a user who visits a site into having code execute locally
334

Question 29

XSRF

Answer 29

Cross-Site Request Forgery

unauthorized commands coming from a trusted user to the website.
335