GCIH Malware Analysis Fundamentals Quiz

1. What is the primary advantage of using a honeypot in malware research?

It prevents all malware infections

It allows controlled observation of malware behavior

It automatically removes detected threats

It blocks malware at the network perimeter

2. Which of the following best describes a zero-day vulnerability in malware context?

A vulnerability that has been known for zero days

An unknown vulnerability exploited before a patch exists

A vulnerability that affects zero users

A vulnerability found in antivirus software

Submit

4. What is the main purpose of incident response in malware infections?

To prevent all future attacks

To contain, eradicate, and recover from the infection

To prosecute attackers

To sell security products

5. Which file type is most commonly used to distribute malware via email attachments?

Image files (JPG, PNG)

Executable files (EXE, DLL)

Audio files (MP3, WAV)

Text files (TXT, DOC)

Submit

7. What is the primary role of antivirus heuristics in malware detection?

To identify unknown malware by analyzing suspicious behavior patterns

To encrypt all executable files

To quarantine all unsigned software

To monitor network bandwidth usage

Submit

9. Which of the following is NOT a typical indicator of compromise (IOC)?

Suspicious file hashes

Unusual network connections

Normal system boot time

Unexpected registry modifications

Submit

11. What is the primary purpose of static malware analysis?

Examining code without executing the program

Running malware in a controlled environment

Monitoring network traffic during execution

Analyzing system logs after infection

Submit

13. Which analysis technique involves examining malware's behavior by monitoring system calls and registry modifications?

Signature analysis

Heuristic analysis

Behavioral analysis

Cryptographic analysis

Submit

15. What is the function of a backdoor in malware?

To encrypt files on the system

To provide unauthorized remote access

To monitor user keyboard input

To delete system restore points

16. Which of the following is a characteristic of a trojan horse?

Replicates itself automatically

Appears legitimate but contains hidden malicious code

Requires human interaction to spread

Only infects network servers

Submit

18. What does the term 'polymorphic malware' refer to?

Malware that changes its code to evade detection

Malware that requires multiple infections

Malware that only affects Windows systems

Malware that spreads through email

Submit

20. Which tool is commonly used to disassemble and analyze binary malware?

Wireshark

IDA Pro

Snort

Burp Suite

GCIH Malware Analysis Fundamentals Quiz

1. What is the primary advantage of using a honeypot in malware research?

2.

What first name or nickname would you like us to use?

2. Which of the following best describes a zero-day vulnerability in malware context?

3. A _____ is software that appears to have legitimate functionality but secretly performs malicious actions.

4. What is the main purpose of incident response in malware infections?

5. Which file type is most commonly used to distribute malware via email attachments?

6. A _____ attack uses compromised legitimate websites to distribute malware to visitors.

7. What is the primary role of antivirus heuristics in malware detection?

8. Malware that records user keystrokes is classified as a _____.

9. Which of the following is NOT a typical indicator of compromise (IOC)?

10. A _____ is a unique string or pattern used to identify known malware samples.

11. What is the primary purpose of static malware analysis?

12. Malware that encrypts a victim's files and demands payment for decryption is called _____.

13. Which analysis technique involves examining malware's behavior by monitoring system calls and registry modifications?

14. A _____ is self-replicating malware that spreads across networks without user intervention.

15. What is the function of a backdoor in malware?

16. Which of the following is a characteristic of a trojan horse?

17. A rootkit is malware designed to hide itself and maintain _____ access to a system.

18. What does the term 'polymorphic malware' refer to?

19. In dynamic malware analysis, a _____ is used to safely execute suspicious code.

20. Which tool is commonly used to disassemble and analyze binary malware?