Certified Ethical Hacker System Hacking and Malware 3

Question 1

A Trojan opens TCP port 6667 and beacons to an external server awaiting commands. This indicates the host is part of what?

Accepted Answer

A botnet

Answer

A compromised host beaconing to a command server for instructions is a bot in a botnet.

Question 2

Which type of malware encrypts a victim's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware encrypts files and demands payment for the decryption key.

Question 3

An ethical hacker wants to detect a previously unknown malware sample by observing its runtime behavior in an isolated environment. This is called what?

Accepted Answer

Dynamic (sandbox) analysis

Answer

Dynamic analysis runs the sample in a sandbox to observe its behavior at runtime.

Question 4

Which tool is commonly used to bind a Trojan to a legitimate executable so it runs alongside the original program?

Accepted Answer

Wrapper (binder)

Answer

A wrapper or binder joins a Trojan to a legitimate executable so both run together.

Question 5

An attacker schedules malicious code to execute only when a specific employee's account is deleted. This is an example of what?

Accepted Answer

Logic bomb

Answer

A logic bomb executes its payload when a specific condition or trigger is met.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker System Hacking and Malware 3