QUESTIONS AND CORRECT ANSWERS
COMPLETE INFORMATION SECURITY
STUDY GUIDE
●● Virus
Answer: self-replicating, malicious programs that need a host
(computing device)
●● Macro viruses
Answer: live within documents or emails and exploit the scripting
capabilities of productivity software
●● Retroviruses
Answer: specifically target antivirus systems to render them useless
●● Phage viruses
Answer: infect many aspects of a system to increase survivability
●● Companion viruses
Answer: disguises itself as a .com executable
,●● Polymorphic viruses
Answer: can alter their own code to avoid detection
●● Worm
Answer: malicious software that travels throughout a network without
need for a host application or user interaction (virus that doesn't need
host)
●● Spyware
Answer: software that is installed on a user's system without her
awareness or consent to gather information and take some control of a
system
●● Grayware
Answer: applications that are bad but usually aren't threatening and thus
aren't classified as viruses, trojans, etc.
●● Trojan
Answer: a form of malicious software that is disguised as something
legitimate
●● Rootkit
Answer: a group of software that enables unauthorized access to parts of
a computer system and prevents detection of malicious software
,●● Bootkit/Boot sector virus
Answer: a malicious infection that targets the Master Boot Record on a
disk and can be executed before the operating system is loaded
●● Backdoor
Answer: a developer-installed access method that bypasses security
restrictions, or a hacker-installed remote access client (intended vs.
unintended)
●● Logic bomb
Answer: a form of malicious code that remains dormant until a
triggering event occurs (e.g. time, date, program launch)
●● Botnet
Answer: a network of malicious software agents controlled by a hacker,
used in DDoS attacks
●● DoS and DDoS
Answer: A denial-of-service attack is an attack intended to make a
computer's resources unavailable/prevents server from responding to
requests
DDoS - distributed denial of service; DoS with multiple computers
, ●● MitM
Answer: Man in the middle - a communications eavesdropping attack on
a network between a client and server
●● Replay attacks
Answer: an attacker captures network traffic and then replays (uses) that
capture traffic to gain unauthorized access to a system
●● TCP
Answer: Transmission Control Protocol - a standard that defines how
programs exchange data over networks; error-checks and preserves order
of data packets
●● TCP/IP hijacking
Answer: a third party takes over a network session and disconnects a
client that was originally involved in the session
●● Fast flux
Answer: A DNS (domain name system) technique used by botnets to
hide phishing and malware domains using changing IP addresses and
pointing to controlled computers which act as proxies (firewalls for the
botnets)
●● Service Pack