Incident Handling 2

This malware type replicates without human intervention:

• trojan

• virus

• ransomware

• worm

An attacker registers the domain chasrbank[.]com. What type of attack is this?

• Pass the hash

• DNS poisoning

• Typosquatting

• Redirection

Which of the following are behavioral indicators of a computer worm (select all that apply)?

• new accounts created

• performance issues on the system

• corrupt files

• unknown emails

Which of the following are indications of a ransomware infection (Select all that apply)?

• replication

• backup deletion

• ransom note

• encrypted files

A popular tool to conduct "Pass the Hash" and related attacks.

• Kali

• Hydra

• Cain and Abel

• Mimikatz

Which indicator type can NOT be searched in VirusTotal?

• file hash

• email sender

• domain

• IP

Which type of Trojan focuses on redirecting victims to fraudulent financial sites in order to steal information?

• RATs

• Banking Trojan

• AV Trojan

• Backdoors

A program that takes the executable as input and uses compression to obfuscate the executable's content is called?

• An obfuscator

• A packer

• An encryptor

• UPX

A HTTP response code of 404 means what?

• Not found

• Forbidden

• Moved Permanently

• OK

This attack type in many cases takes advantage of the domain registrar or hosting platforms.

• Typosquatting

• Man in the middle

• domain hijacking

• DNS poisoning