Unit 3 - 2.4.6 - Logic Bombs and Rootkits

What is a logic bomb?

• A type of malware that encrypts sensitive data on a computer system.

• A piece of code that waits for specific conditions to be met before executing.

• A hardware device used to trigger system failures.

• A security measure designed to prevent unauthorized access to computer networks.

What are triggers in the context of logic bombs?

• Hardware components used to activate the logic bomb.

• Specific events or conditions that cause the logic bomb to execute.

• Encryption keys used to decrypt data encrypted by the logic bomb.

• Security measures used to detect and neutralize logic bombs.

What are time bombs?

• Logic bombs that detonate after a certain amount of time has passed.

• Logic bombs that detonate when triggered by specific events.

• Hardware devices used to activate logic bombs.

• Encryption keys used to decrypt data encrypted by logic bombs.

Who is likely to install a logic bomb as an insider threat?

• A cybersecurity expert hired to protect the company's network.

• A disgruntled employee with privileged access to computer systems.

• An external hacker attempting to breach the company's security.

• A competitor trying to sabotage the company's operations.

Why are logic bombs hard to identify?

• They are large and easily detectable by antivirus software.

• They are activated randomly without specific triggers.

• They are stealthy by nature and remain inactive until triggered.

• They only affect outdated computer systems.

What is a recommended defense against logic bombs?

• Disabling all antivirus software to prevent detection.

• Regularly updating the operating system and patching vulnerabilities.

• Ignoring scheduled tasks and system backups.

• Using weak passwords to deter logic bomb activation.

What is a rootkit?

• A type of malware that provides administrative access to a computer while concealing its presence.

• A type of malware that targets only Linux/Unix systems.

• A hardware component used to enhance computer performance.

• A software tool used by system administrators to enhance system security.

What is the main role of a rootkit?

• To enhance computer performance.

• To alter system files and conceal its presence to avoid detection.

• To provide additional security features to the operating system.

• To detect and remove other malware from the computer.

Why are rootkits difficult to detect?

• Because they only target outdated operating systems.

• Because they activate after the operating system boots up.

• Because they alter system files and data reports to avoid detection.

• Because they are only installed on Linux/Unix systems.

How do rootkits block some antivirus software?

• By encrypting system files.

• By activating before the operating system boots up.

• By disabling the computer's firewall.

• By uninstalling the antivirus software.