Examkin

Question

Difficulty: EasyMalware Types and Indicators of Compromise

Match each malware classification to its primary characteristic or technical indicator.

  • RansomwareEncrypts target system data and demands payment for the restoration key.
  • KeyloggerCaptures user keystrokes to extract credentials and confidential inputs.
  • Logic BombLies dormant until specific logical conditions or specific dates trigger payload execution.
  • RootkitOperates at a deep system level to hide processes, files, and unauthorized access from the operating system.

Answer

Ransomware matches with encrypting target system data for payment; Keylogger matches with capturing user keystrokes; Logic Bomb matches with lying dormant until specific trigger conditions occur; Rootkit matches with operating at a deep system level to hide unauthorized processes.
Each malware term correctly maps to its defining characteristics: Ransomware locks files for payment, Keyloggers capture keystroke data, Logic Bombs detonate under preset conditions, and Rootkits manipulate operating system routines to evade detection.

Step-by-Step Solution

1
Analyze each malware type on the left
Identified Ransomware, Keylogger, Logic Bomb, and Rootkit.
Each malware type exhibits distinct behavior and indicators of compromise.
2
Map each malware category to its corresponding operational mechanism
Ransomware locks/encrypts files for extortion; Keylogger intercepts keystrokes; Logic Bomb triggers on condition; Rootkit hides deeply within the OS.
Matching technical behaviors to malware definitions provides clear identification during incident analysis.

Key Concept

Malware Types and Indicators of Compromise
Rate this question

Topics

Malware Types and Indicators of Compromise

More questions from this topic