Examkin

Soru

Zorluk: KolayMalware Types and Indicators of Compromise

An incident responder identifies an active threat on an enterprise network where a malicious program continuously scans adjacent hosts across the local subnet and automatically copies itself to available network shares without requiring any user execution or logged-in credentials. Which of the following malware types is primarily characterized by this autonomous network replication capability?

  1. WormCevap
  2. B
    Trojan
  3. C
    Logic bomb
  4. D
    Keylogger

Cevap

Worm
Worms are stand-alone malicious programs that autonomously replicate across networks without requiring user interaction or a host file to attach to.

Adım Adım Çözüm

1
Analyze the operational characteristics described in the scenario.
The malware independently scans local network subnets and replicates itself without user interaction.
Identifying self-propagation mechanism helps classify the malware family.
2
Compare propagation behavior against standard malware definitions.
Autonomous propagation over network connections is the defining feature of a worm.
Trojans, keyloggers, and logic bombs depend on user triggers, execution payloads, or timed logic rather than self-replication.

Anahtar Kavram

Malware Propagation Mechanisms - Worm vs. Trojan
Bu soruyu puanla

Konular

Malware Types and Indicators of Compromise

Bu konudan daha fazla soru