SSCP Certification SSCP Malicious Code Countermeasures 4

Question 1

Which of the following is a PRIMARY indicator of a fileless malware attack?

Accepted Answer

Malicious code executing entirely within memory without writing to disk

Answer

Fileless malware operates entirely in memory (e.g., via PowerShell or WMI), leaving no files on disk and therefore evading traditional file-based antivirus detection.

Question 2

An attacker embeds a malicious macro in a Microsoft Word document sent via phishing email. Which countermeasure MOST directly prevents execution of this macro?

Accepted Answer

Configuring Group Policy to disable macros in Office applications

Answer

Disabling macros via Group Policy prevents Office documents from executing embedded VBA code, directly blocking this common malware delivery vector.

Question 3

What is 'steganography' in the context of malware delivery?

Accepted Answer

Hiding malicious code within an innocent-looking file such as an image

Answer

Steganography conceals malicious payloads within ordinary-looking files (images, audio, video) so that the carrier file appears benign to scanners and users.

Question 4

Which of the following BEST describes a multi-vector malware attack?

Accepted Answer

An attack using several different infection methods to improve success rate

Answer

Multi-vector attacks combine different delivery or exploitation techniques (e.g., phishing plus drive-by download plus USB drop) to increase the probability that at least one vector will succeed.

Question 5

A host-based intrusion prevention system (HIPS) blocks a process from injecting code into another running process. Which malware technique is being prevented?

Accepted Answer

Process hollowing or DLL injection

Answer

Process hollowing and DLL injection are techniques where malware injects malicious code into a legitimate running process to hide its activity; HIPS can detect and block these abnormal process interactions.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Malicious Code Countermeasures 4