COMPLETE QUESTIONS AND CORRECT DETAILED
ANSWERS (VERIFIED ANSWERS) |ALREADY
GRADED A+||BRAND NEW VERSION!!
How does fileless malware operate? - CORRECT ANSWER- Exploits trusted processes in
memory to remain undetected.
"Living Off- the Land" Attack - CORRECT ANSWER- Attacks where a malicious user gain access
to an endpoint and uses legitimately installed software to perform further attacks.
Exploits - CORRECT ANSWER- A software tool designed to take advantage of a flaw in a
computer system.
Ransomware - CORRECT ANSWER- Malicious software that encrypts and locks the contents
and files of computers and demands a ransom for the encryption to unlock the data.
The Protection Cycle - CORRECT ANSWER- 1) Visibility
2) Detection
3) Remediation/response
4) Prevention
, Visibility - CORRECT ANSWER- (Protection Cycle)Trace every action taken by running
applications.
Detection - CORRECT ANSWER- (Protection Cycle)Monitor active processes and preform real-
time blocking of zero-day attacks, targeted attacks, and other advanced threats designed to
bypass traditional antivirus and anti-malware solutions.
Remediation/response - CORRECT ANSWER- (Protection Cycle)Use collected forensic
information to complete in-depth analysis of every attempted attack.
Prevention - CORRECT ANSWER- (Protection Cycle)Edit the protection model settings and
patches for vulnerabilities
Zero-day attacks and APTs - CORRECT ANSWER- New threats that have never been seen before
Fileless malware - CORRECT ANSWER- Malicious software that runs in memory instead of as a
physical file on the endpoint.
Watchguard Endpoint Protection Platform (EPP) - CORRECT ANSWER- (Watchguard Endpoint
Security) Protects endpoints from threats and reduces the attack surface. Includes a full range
of protection features(antivirus, firewall, device control, URL filtering)
Watchgurad Endpoint Detection and Response (EDR) - CORRECT ANSWER- (Watchguard
Endpoint Security) Detects and responds effectively to any type of unknown malware, as well as
the fileless and malwareless attacks that traditional solutions cannot detect. Uses Zero-Trust
application service to prevent applications and processes from running until they are validated
as trusted.