Certified Ethical Hacker System Hacking and Malware 1

Question 1

What is privilege escalation and what are the two types?

Accepted Answer

Gaining higher access rights than authorized; vertical (user to admin) and horizontal (accessing another user's resources)

Answer

Climbing the corporate hierarchy

Answer

Increasing network bandwidth privileges

Answer

Upgrading software to premium versions

Question 2

What is a rootkit and why is it particularly dangerous?

Accepted Answer

Malware that hides deep in the OS to maintain persistent, undetectable access

Answer

A toolkit for root vegetables

Answer

A legitimate system administration tool

Answer

A type of firewall software

Question 3

What is the difference between a virus, worm, and Trojan?

Accepted Answer

Viruses attach to files and need user action; worms self-replicate across networks; Trojans disguise as legitimate software

Answer

They are all the same type of malware

Answer

Worms require user action while viruses don't

Answer

Trojans self-replicate but viruses don't

Question 4

What is a keylogger and how can it be detected?

Accepted Answer

Software or hardware that records keystrokes; detected through antimalware, process monitoring, and physical inspection

Answer

A tool for logging into key management systems

Answer

A password manager application

Answer

A type of keyboard with built-in logging

Question 5

What are common password cracking techniques?

Accepted Answer

Dictionary attacks, brute force, rule-based attacks, rainbow tables, and credential stuffing

Answer

Only guessing common passwords

Answer

Only using social engineering

Answer

Only using brute force

Question 6

What is fileless malware and why is it difficult to detect?

Accepted Answer

Malware that operates entirely in memory without writing files to disk, evading traditional file-based scanning

Answer

Malware with no file size

Answer

Malware that deletes all files on a system

Answer

Malware that only affects file servers