Examkin

Soru

Zorluk: KolayMalware Types and Indicators of Compromise

An incident responder notices that a malicious program rapidly infected dozens of systems across an internal network by exploiting a known remote code execution vulnerability, operating completely independently without any user action. Which of the following malware types best describes this threat?

  1. WormCevap
  2. B
    Trojan
  3. C
    Logic bomb
  4. D
    Firewall control

Cevap

Worm
A worm is a standalone malicious program that replicates itself automatically across computer networks by exploiting vulnerabilities without requiring human interaction.

Adım Adım Çözüm

1
Analyze the infection vector described in the incident scenario.
The malicious code spreads automatically across systems without requiring user interaction.
Identifying whether propagation is automated or requires user execution distinguishes self-replicating malware from disguised payloads.
2
Match the observed behavior with standard malware classifications.
Self-contained, self-propagating malware that leverages network vulnerabilities without user involvement is classified as a worm.
Worms are specifically defined by their ability to spread independently across network connections.

Anahtar Kavram

Malware Propagation Mechanisms (Worm vs. Trojan)
Bu soruyu puanla

Konular

Malware Types and Indicators of Compromise

Bu konudan daha fazla soru