Malware summary questions

The questions are randomised per student, and for these questions you will receive only correct/incorrect feedback. In each question of Problem 1, there is exactly one correct option.

In Problem 2, at least one correct option is randomly assigned to each student, usually more. For a partially correct answer, Plussa gives feedback incorrect, but Problem 2 is accepted when the score is 12 or higher and the points are shown on a yellow background. Points start to accumulate only when more than half of the selections in the task are correct. From the score, it is not possible to directly determine whether an individual selection is correct or not.

Question 1

One classification is a potentially unwanted program. Which of the following does not belong to this class?

Spyware

Worm

Adware

Surveillance software

Question 2

Which of the following does not apply to a virus?

Spreads independently.

Can be updated.

Is coordinated.

Remains permanently in the system.

Question 3

Various techniques can be used for obfuscation. Which does not belong to them?

Encryption.

No-operation instructions.

Changing the order of instructions.

Using a hash.

Question 4

Certain actions may be necessary when malware is detected. Which does not belong to them?

Reinstalling the operating system.

Updating firewall rules.

Using backups.

Hiding the infection.

Question 5

Malware cannot come from

an email attachment.

a USB device.

the network directly.

a text file.

Question 6

How should ransomware not be removed?

Using backups.

Breaking the encryption.

Paying the ransom.

Using previously published passwords.

Question 7

What are botnets not typically used for?

Cryptocurrency mining.

Denial-of-service attacks.

Clicking advertisements.

Breaking encryption algorithms.

Select the correct statements. You may choose one or more options.

Question 1

The definition of a worm is almost unambiguous.

The definition of a virus is almost unambiguous.

Devices in a botnet are not connected to each other.

Malware authors are traced by monitoring network address registrations and network traffic.

The definition of malware is almost unambiguous.

The definition of a Trojan horse is almost unambiguous.

There are service providers that do not intervene in malware hosted on their servers.

An advanced persistent threat is carried out solely using malware.

In reverse engineering, program code is executed and changes in the system are observed.

Almost all malware is analysed manually.

In dynamic analysis, among other things, network traffic is monitored.

Static analysis does not use source code.

Posting submission...