CSCU Malware and Antivirus 2

Question 1

What distinguishes a worm from a virus in terms of propagation?

Accepted Answer

Worms can self-replicate and spread across networks without user interaction, while viruses require a host file and user action to spread

Answer

Unlike viruses that attach to files and require user action to spread, worms are self-replicating malware that can propagate automatically across networks by exploiting vulnerabilities.

Question 2

What is a rootkit and why is it particularly dangerous?

Accepted Answer

Malware that hides deep within the operating system to conceal its presence and the presence of other malware

Answer

A rootkit embeds itself deep in the operating system—sometimes at the kernel level—to hide malicious activity from security software and users, making detection and removal extremely difficult.

Question 3

What is heuristic-based malware detection?

Accepted Answer

Detection that analyzes code behavior and structure to identify potentially malicious programs even without a known signature

Answer

Heuristic analysis examines the behavior patterns and code characteristics of programs to detect potentially malicious software, even if it hasn't been previously identified and cataloged.

Question 4

What is a fileless malware attack?

Accepted Answer

Malware that operates entirely in memory without writing persistent files to disk, evading traditional file-scanning antivirus

Answer

Fileless malware resides in RAM and uses legitimate system tools like PowerShell or WMI, avoiding detection by file-based antivirus scanners that look for malicious files on disk.

Question 5

Why is it important to keep antivirus signature databases up to date?

Accepted Answer

New malware is constantly being created, and updated signatures allow the antivirus to recognize and block the latest threats

Answer

Hundreds of thousands of new malware variants emerge daily, and signature updates contain the latest threat definitions needed to detect and block these newly identified threats.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Malware and Antivirus 2