Certified Ethical Hacker System Hacking and Malware 5

Question 1

Which type of malware disguises itself as legitimate software to trick users into installing it but does not self-replicate?

Accepted Answer

Trojan horse

Answer

A Trojan horse masquerades as legitimate software and does not self-replicate.

Question 2

An attacker re-times malicious commands to run during off-hours and routes traffic over port 443 to blend with normal HTTPS. This primarily aims to achieve what?

Accepted Answer

Defense evasion / detection avoidance

Answer

Blending malicious traffic with legitimate HTTPS and off-hours timing is defense evasion.

Question 3

Which Linux file, if writable by a low-privilege user, could be abused to escalate privileges by adding a malicious cron entry?

Accepted Answer

/etc/crontab

Answer

A writable /etc/crontab lets an attacker schedule commands that run as root.

Question 4

A polymorphic virus evades antivirus primarily by doing what on each infection?

Accepted Answer

Changing its decryption routine/code signature

Answer

Polymorphic viruses mutate their code or decryption routine each time to alter their signature.

Question 5

Which technique allows an attacker who compromised one host to use its trust relationships to access additional systems on the network?

Accepted Answer

Lateral movement

Answer

Lateral movement uses a foothold to reach and compromise other systems across the network.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker System Hacking and Malware 5