Exam 2: Viruses, Worms, and Malicious Software

____________________ are one of the most vulnerable points of attack in an organization.

File infector viruses can infect systems through multiple means, particularly through boot or partition sectors and through executable files.

What do you need to have for Red Hat Linux if a system file on the hard disk is corrupted?

One way to spread a(n) ____________________ virus is to attach it to a template that many users share, enabling it to spread each time the template is opened in a new document.

What is displayed in the figure above?

A _____ virus can infect systems through multiple means, particularly through boot or partition sectors and through executable files.

List the three steps in the process of the initial bootup from a disk.

What was one reason the Slammer worm was successful against SQL Server database servers in early 2003?

Which of the following executable file extensions can be found on a Netware 6.x system?

Which of the following worms uses buffer overflows to do damage?

Does Windows 2000 use an ASR set to recover from a system failure?

Viruses can be classified by the way they protect themselves from detection or from a virus scanner. List the four classifications.

In Red Hat Linux, what mode do you need to be in to run the fdisk/mbr utility which replaces the MBR?

Cookie snarfing is an attack where a spyware operator can reconstruct a user's every move on the Internet by capturing cookies or the information contained in the cookies.

The ____________________ virus did not destroy data, but instead inserted the following line in the virus-carrying document when it was opened: "Twenty-two points, plus triple-word-score, plus fifty points for using all my letters. Game's over. I'm outta here."

Does an organizational policy work best if users are not included in the policy creation process?

What process does the Linux.Millen.Worm use on the attacked operating system?

Should you create a new ASR set each time you add a protocol or install a new driver for a network interface card?

Which of the following Microsoft operating systems uses driver signing?

The _____ targets systems running the SQL Server database on Windows-based workstations and servers.