Malware Awareness Quiz

Jennifer decided that the licensing cost for a piece of video editing software was too expensive. Instead, she decided to download a keygen program to generate her own license key and install a pirated version of the editing software. After she runs the keygen, a license key is created, but her system performance becomes very sluggish and her antimalware suite begins to display numerous alerts.

• Worm

• Trojan

• Adware

• Logic bomb

Jeffrey, the Security Operations Center director for Security Time Corporation, received a pop-up message on his workstation that said “You will regret firing me, just wait until Christmas!” He suspects the message that a disgruntled former employee may have setup a piece of software to create this pop-up on his machine, and is concerned what other code might be lurking that will create a negative effect on Christmas. He directs his team of cybersecurity analysts to begin search the network for this suspicious code. What type of malware are they searching for?

• Worm

• Trojan

• Adware

• Logic bomb

Your organization has been receiving a lot of phishing emails recently and you are trying to determine why they are effective in getting your users to click on their links. The latest email consists of what looks like an advertisement that is offering an exclusive early access opportunity to buy a new iPhone at a discounted price, but there are only 5 phones available at this price. What type of social engineering principle is being exploited here?

• Familiarity

• Scarcity

• Intimidation

• Trust

Tierra works as a cybersecurity analyst for a large multi-national oil and gas company. She is responding to an incident at her company in which their public-facing web server has been defaced with the words, “Killers of the Arctic”. She believes this was done in response to her company’s latest oil drilling project in the Arctic Circle. Which group is most likely to blame for the website defacement?

• Script kiddies

• Organized crime

• APT

• Hacktivist

During your annual cybersecurity awareness training in your company, the instructor states that employees should be careful as to what information they post on social media. According to the instructor, if you post too much personal information on social media, such as your name, birthday, hometown, and other personal details, it is much easier for an attacker to conduct which type of attack in order to break your passwords?

• Birthday attack

• Brute force attack

• Cognitive password attack

• Rainbow table attack

During a search of your network, you discovered an unauthorized device that is allowing access to networked resources. What type of attack is being used?

• Bluesnarfing

• Bluejacking

• IV attack

• Rogue access point

You are hiring a penetration testing firm to conduct an assessment of your company’s network. As part of the contract, your company has specified that they will not provide any details of the network to the penetration testing firm. Instead, the company wants to see how much information about the network the firm can find using open source research and by conducting scanning of the corporate network. What type of assessment is this?

• White Box

• Gray Box

• Blue Box

• Black Box

Your intrusion detection system has produced an alert based on its review of a series of network packets. After analysis, it is determined that the network packets did not contain any malicious activity. How would you classify this alert?

• True

• False

Lamont is in the process of debugging a software program. As he is examining the code, he discovers that it is written incorrectly. Due to the error, the code is not validating the

• SQL injection

• Cross-site scripting

• Malicious logic

• Buffer overflow

Ted, a file server administrator, has noticed that a large number of sensitive files have been transferred from a corporate workstation to an IP address outside of the local area network. Ted looks up the IP address and determines that it assigned to a country in Russia. Ted contacts his company’s security analyst, Sally, who verifies that the workstation’s antimalware solution is up-to-date and the network’s firewall is properly configured. What type of attack most likely occurs to allow the exfiltration of the files from the workstation?

• Session hijacking

• Zero day

• MAC spoofing

• Impersonation