Malware Prevention

Question 1

What types of malware are there?

Answer 1

• Virus
• Worm
• Trojan Horse
• Rootkit
• Spyware
• Ransomware
• Keylogger

Question 2

What is a virus?

Answer 2

Spread via “hosts”, modifies code without consent

Question 3

What is a worm?

Answer 3

Self-replicating malware

Question 4

What is a RAT?

Answer 4

Remote Access Trojan, that opens a backdoor in a system?

Question 5

What is a rootki?

Answer 5

Malware with steal features that are hard to detect and remove

Question 6

What is spyware?

Answer 6

(unwanted) Monitors user actions to gather data.

Question 7

What is Ransomware?

Answer 7

Restricts user access to data/programs until a Ransome is paid.

Question 8

What is a keylogger?

Answer 8

Hardware/software devices that capture typed keys

Question 9

What are cryptominers?

Answer 9

Use (steal) CPU power to mine cryptocurrency

Question 10

What is stalkerware?

Answer 10

Broader than keyloggers, monitors activity, location, messages.

Question 11

What is Fileless Malware?

Answer 11

Exists only in RAM, leverage OS services to do whatever

Question 12

What is zombie botnet?

Answer 12

Computers under external control to span networks

Question 13

What are malware symptons?

Answer 13

• Unexpected behaviours
• GUI changes
• Browsers going to the wrong page
• Lockups and crashes
• Programs that don’t uninstall
• Slow boots and logons

Question 14

What are secure DNS services?

Answer 14

DNS’ with security features like servers that have a list of blocked websites that contain malware.

Question 15

What is UEFI Secure Boot?

Answer 15

Ensures boot loader is properly signed and valid to boot

Question 16

What is System Restore (Windows)?

Answer 16

A form of recovery media, that lets you reinstall OS and applications

Question 17

What is System Image Recovery (windows)?

Answer 17

Allows you to restore an entire image of a disk

Question 18

What is EDR?

Answer 18

Endpoint Detection and Response. Basic cybersecurity approach in which endpoints have software agents that:
monitor, detect, report and respond to threats

Question 19

What is MDR?

Answer 19

Managed Detection Response. EDR as a service, monitoring and threat analysis by a team of security experts

Question 20

What is XDR?

Answer 20

Extended Detection and Response. Monitors and detects all data flows across an ogranization