Certified Ethical Hacker System Hacking and Malware 3

Question 1

A Trojan opens TCP port 6667 and beacons to an external server awaiting commands. This indicates the host is part of what?

Accepted Answer

A botnet

Answer

A honeypot

Answer

A DMZ

Answer

A VPN tunnel

Question 2

Which type of malware encrypts a victim's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Spyware

Answer

Adware

Answer

Rootkit

Question 3

An ethical hacker wants to detect a previously unknown malware sample by observing its runtime behavior in an isolated environment. This is called what?

Accepted Answer

Dynamic (sandbox) analysis

Answer

Static analysis

Answer

Signature scanning

Answer

Hash comparison

Question 4

Which tool is commonly used to bind a Trojan to a legitimate executable so it runs alongside the original program?

Accepted Answer

Wrapper (binder)

Answer

Port scanner

Answer

Packet sniffer

Answer

Disassembler

Question 5

An attacker schedules malicious code to execute only when a specific employee's account is deleted. This is an example of what?

Accepted Answer

Logic bomb

Answer

Worm

Answer

Keylogger

Answer

Backdoor

Question 6

Which Windows feature, when abused, lets attackers store malicious data hidden from normal directory listings on NTFS volumes?

Accepted Answer

Alternate Data Streams (ADS)

Answer

Shadow copies

Answer

Page file

Answer

Registry hives

Question 7

What is the primary purpose of a packer when used by malware authors?

Accepted Answer

To compress and obfuscate the binary to evade signature detection

Answer

To speed up program execution

Answer

To add legitimate digital signatures

Answer

To improve memory management