Payload Delivery GDAT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a common technique used to deliver a payload via a USB drive?

   • AUsing a USB drive to create a Wi-Fi hotspot that delivers malware.
   • BSending an email with the USB drive as an attachment.
   • CEmbedding a malicious link in the USB drive's file system.
   • DUsing an autorun.inf file to automatically execute the payload when the drive is inserted.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is investigating a malware sample that was delivered via a malicious link in a phishing email. The sample is a Windows executable that has been packed with a custom packer. The analyst wants to determine the malware's capabilities. Which of the following approaches would be most effective?

   • AUse a hex editor to search for strings that indicate malicious functionality.
   • BSubmit the executable to an online virus scanner to get a detection report.
   • CRun the executable in a sandbox and observe its behavior.
   • DPerform static analysis using a disassembler to examine the unpacked code.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst at a manufacturing firm notices that several employees in the finance department have received emails with a PDF attachment that, when opened, launches a PowerShell script. The script downloads a second-stage payload from a file-sharing site. Which two techniques are being combined in this attack?

   • AEmail attachment delivery and script-based obfuscation
   • BRemovable media and physical delivery
   • CDrive-by download and exploit kit delivery
   • DWatering hole and malvertising
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A manufacturing company has a policy that allows employees to use personal USB drives to transfer files between their workstations and home computers. The security team is concerned about the risk of malware being introduced via these drives. They want to implement a control that balances security with the need for employees to use USB drives. Which of the following controls would be most effective?

   • AProvide employees with training on how to safely use USB drives.
   • BImplement a DLP solution that blocks the copying of sensitive files to USB drives.
   • CDisable all USB ports on company workstations using Group Policy.
   • DRequire employees to use company-issued, encrypted USB drives that are automatically scanned by endpoint security software when inserted.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following best describes a drive-by download as a payload delivery mechanism?

   • AAn attacker sends a phishing email with a malicious attachment that the user opens, triggering the payload.
   • BAn attacker physically inserts a USB drive into the target's computer, and the payload runs automatically via autorun.
   • CA user clicks a link in an email that leads to a malicious website that automatically downloads and executes malware without user interaction.
   • DA user downloads a file from a file-sharing service and then manually runs it after being tricked by social engineering.
   Reveal Solution Discussion Select an answer first