Malware

Question 1

Harmful programs used to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems are commonly referred to as:

Answer 1

Malware

Question 2

Malware that restricts access to a computer system by encrypting files or locking the entire system down until the user performs requested action is known as:

Answer 2

Ransomware

Question 3

Which of the following terms refers to an example of crypto-malware?

Answer 3

Ransomware

Question 4

A type of software that performs unwanted and harmful actions in disguise of a legitimate and useful program is known as:

Answer 4

A Trojan horse

Question 5

What is an example of spyware?

Answer 5

Keylogger

Question 6

A collection of software tools used by a hacker to mask intrusion and obtain administrator-level access to a computer or computer network is known as:

Answer 6

Rootkit

Question 7

Definitions of a computer virus: [3]

Answer 7

• A self-replicating computer program containing malicious segment
• Requires its host application to be run to make the virus active
• Attaches itself to an application program or other executable component

Question 8

A malware-infected networked host under remote control of a hacker is commonly referred to as a:

Answer 8

Botnet

Question 9

What is the name of a standalone malicious computer program that typically propagates itself over a computer network to adversely affect system resources and network bandwidth?

Answer 9

Worm

Question 10

Malicious software collecting information about users without their knowledge/consent is known as:

Answer 10

Spyware

Question 11

What enables troubleshooting a malware-infected system that doesn’t boot up?

Answer 11

Recovery Console

Question 12

What can be used to launch Windows Recovery Environment (WinRE) in Windows 8/8.1/10? [4]

Answer 12

• Boot from installation media
• In Power menu, hold down the Shift key and select Restart
• Boot from Recovery Drive
• Perform system restart from the Settings menu

Question 13

What is the most reliable method for effectice malware removal?

Answer 13

Restoring the entire system from a known good backup copy

Question 14

What would be the best malware-prevention method/tool?

Answer 14

End user education

Question 15

Unified Threat Management (UTM):

Answer 15

• A network security solution, commonly in the form of a dedicated device
• Functionality of a firewall with additional safeguards such as URL filtering, content inspection, spam filtering, gateway antivirus protection, IDS/IPS functionality, or malware inspection.

Question 16

What can be used by system administrators to selectively block access to known malware sites?

Answer 16

DNS configuration

Question 17

According to the CompTIA’s best practice procedures for malware removal, putting a malware-infected Windows-based system into a quarantine should be the next step after:

Answer 17

Identifying and researching malware symptoms

Question 18

According to the CompTIA’s best practice procedures for malware removal, disabling System Restore on a malware-infected Windows-based system should be performed as the next step after:

Answer 18

Isolating the infected system

Question 19

Which of the following locations in MS Windows provide access to an interface containing options for configuring restore settings, managing disk space, and deleting restore points? [2]

Answer 19

• Windows Run dialog box -> type in sysdm.cpl + press Enter -> System Protection -> Configure
• Control Panel (Icon view) -> Recovery -> Configure System Restore -> Configure

Question 20

According to the CompTIA’s best practice procedures for malware removal, removing malicious software on a Windows-based system should be performed as the next step after:

Answer 20

Disabling System Restore

Question 21

According to the CompTIA’s best practice procedures for malware removal, scheduling scans and running updates on a Windows-based system should be performed as the next step after:

Answer 21

Removing malware from the system

Question 22

According to the CompTIA’s best practice procedures for malware removal, enabling System Restore and creating a restore point in Windows should be performed as the next step after:

Answer 22

Scheduling scans and running updates

Question 23

According to the CompTIA’s best practice procedures for malware removal, what should be the final step of the malware removal process?

Answer 23

User education