A user casually browsing the Internet is redirected to a warez site where a number of pop-ups
appear. After clicking on a pop-up to complete a survey, a drive-by download occurs. Which of the
following is MOST likely to be contained in the download?
A.
Backdoor
B.
Spyware
C.
Logic bomb
D.
DDoS
E.
Smurf
Explanation:
Simple enough and it does not require an explanation. Yet for the purpose of this exercise and in order to sediment concepts, here we go:
The key question is: “What is MOST likely to be CONTAINED in the DOWNLOAD”
WRONG ANSWERS:
A. Backdoor – A backdoor in software or a computer system is generally an undocumented portal that allows an administrator to enter the system to troubleshoot or do upkeep. But it also refers to a secret portal that hackers and intelligence agencies use to gain illicit access. The download may contain a file which CREATES a backdoor, but will not contain the Backdoor itself
C. Logic bomb – A logic bomb is a piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met. For example, a programmer may hide a piece of code that starts deleting files (such as a salary database trigger), should they ever be terminated from the company. This is an internal action performed by internal users, so it is not something that one downloads from the internet
D.DDoS – In computing, a denial-of-service attack (DoS attack) is a cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled.This is an attack, and not something we download
E. Smurf – The Smurf attack is a distributed denial-of-service attack in which large numbers of Internet Control Message Protocol (ICMP) packets with the intended victim’s spoofed source IP are broadcast to a computer network using an IP broadcast address. This is an attack, and not something we download
So the only answers that fits the criteria is:
B. Spyware – Spyware is software that is used to gather information about a person or organization without their knowledge and sends that information to another entity.
Whenever spyware is used for malicious purposes, its presence is typically hidden from the user and can be difficult to detect. Some spyware, such as keyloggers, may be installed by the owner of a shared, corporate, or public computer intentionally in order to monitor users.
0
0