Malware Types, Components, and Distribution DFE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security analyst is reviewing a series of incidents. In one, a user downloaded a file from a peer-to-peer network that turned out to be a Trojan. In another, a server was compromised via an unpatched vulnerability and joined a botnet. In a third, a user's system had a rootkit that hid a keylogger. Which classification best describes the malware types involved?

   • ATrojan, botnet client, and rootkit with spyware payload
   • BWorm, ransomware, and adware
   • CVirus, botnet client, and rootkit with adware payload
   • DTrojan, worm, and rootkit with ransomware payload
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In malware analysis, which term refers to the malicious action that a malware performs after it has successfully infected a system, such as deleting files, stealing data, or encrypting files?

   • AStealth technique
   • BPropagation mechanism
   • CInfection vector
   • DPayload
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security team notices that multiple employees have been infected with the same malware after visiting a popular online forum. The forum administrators confirm that they did not intentionally host malware, but an attacker had injected malicious JavaScript into the site's ad server. Which distribution vector best describes this attack?

   • AMalvertising via a compromised ad server
   • BRemovable media infection
   • CWatering-hole attack on the forum itself
   • DPhishing via email attachment
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A forensic analyst is examining a system where the user clicked a link in a phishing email. The analyst finds a file that, when executed, drops a second file into the startup folder and then immediately deletes itself from the disk. The dropped file establishes a connection to a command-and-control server and waits for instructions. Which malware type best describes the dropped file?

   • ARootkit
   • BTrojan
   • CVirus
   • DWorm
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A forensic team is analyzing a malware infection that occurred in a segmented network. The initial entry was a USB drive left in the parking lot. The malware then used a known vulnerability in the SMB protocol to move laterally to other servers. On one server, it installed a driver that hides its processes. Which combination of components and vectors is present?

   • ADrive-by download as infection vector, worm propagation, and adware payload
   • BMalvertising as infection vector, exploit-based propagation, and spyware payload
   • CEmail attachment as infection vector, social engineering, and ransomware payload
   • DRemovable media as infection vector, exploit-based propagation, and rootkit stealth
   Reveal Solution Discussion Select an answer first