Malware Response for Infrastructure Specialists

1. True or False: Malware can only infect Windows operating systems.

True

False

2. True or False: Keeping systems and software current with security patches significantly reduces malware vulnerability.

True

False

3. Which log file should be reviewed to identify unauthorized access attempts during a malware investigation?

Application event logs

Security event logs

System performance logs

Network configuration logs

Submit

5. What should be the first communication step after discovering a widespread malware infection?

Post details on social media to warn the public

Notify the incident response team and follow escalation procedures

Contact all customers immediately without verification

Wait 24 hours to gather more information

6. True or False: Malware can spread through email attachments without any user interaction required.

True

False

7. Which of the following is a best practice for preventing malware reinfection after remediation?

Disable the firewall to improve system performance

Implement regular security updates and user training

Remove antivirus software to reduce system overhead

Restrict all network access permanently

Submit

9. When documenting a malware incident, which information is most critical?

The employee's personal contact information

Timeline of events, affected systems, and actions taken

The cost of new hardware replacements

The name of the person who discovered the malware

10. What is the primary advantage of using a sandbox environment during malware analysis?

It provides unlimited storage capacity

It allows malware to execute safely without affecting production systems

It eliminates the need for antivirus software

It automatically removes all malware traces

11. What is the first step an infrastructure specialist should take when a malware alert is triggered?

Isolate the affected system from the network

Immediately delete all suspicious files

Notify the CEO before taking any action

Run a full system backup to preserve evidence

Submit

13. Before reconnecting a cleaned system to the network, what should be verified?

Only that the system boots successfully

That all security patches and antivirus definitions are current

That the system has adequate disk space

That user passwords have been reset once

14. Which of the following best describes the purpose of a forensic image in malware investigation?

To create a backup for system restoration

To preserve evidence for analysis without altering the original system

To accelerate malware scanning performance

To compress infected files for storage

15. What does the term 'quarantine' mean in the context of malware response?

Permanently deleting all infected files

Moving suspicious files to an isolated location where they cannot execute

Encrypting files to prevent access

Notifying law enforcement of the infection

16. True or False: It is safe to connect an infected system to the internet to download the latest antivirus patches.

True

False

17. Which tool is commonly used to scan for malware signatures on an infected system?

Antivirus software

Network packet analyzer

Disk partitioning utility

System registry editor

Submit

19. When isolating a compromised server, what should be disconnected first?

The keyboard and mouse

The network cable or disable network interface

The power supply immediately

All USB devices only

20. Which of the following is a primary characteristic of ransomware?

It replicates without user action

It encrypts files and demands payment for decryption

It only affects operating system files

It requires administrator credentials to install

Infrastructure Specialist Responding to a Malware Alert Quiz

1. True or False: Malware can only infect Windows operating systems.

2.

What first name or nickname would you like us to use?

2. True or False: Keeping systems and software current with security patches significantly reduces malware vulnerability.

3. Which log file should be reviewed to identify unauthorized access attempts during a malware investigation?

4. A ____ is malicious software that disguises itself as legitimate software to trick users into installing it.

5. What should be the first communication step after discovering a widespread malware infection?

6. True or False: Malware can spread through email attachments without any user interaction required.

7. Which of the following is a best practice for preventing malware reinfection after remediation?

8. A ____ alert typically indicates suspicious network traffic or behavior detected by security monitoring tools.

9. When documenting a malware incident, which information is most critical?

10. What is the primary advantage of using a sandbox environment during malware analysis?

11. What is the first step an infrastructure specialist should take when a malware alert is triggered?

12. A ____ is a type of malware that spreads by replicating itself and attaching to legitimate programs.

13. Before reconnecting a cleaned system to the network, what should be verified?

14. Which of the following best describes the purpose of a forensic image in malware investigation?

15. What does the term 'quarantine' mean in the context of malware response?

16. True or False: It is safe to connect an infected system to the internet to download the latest antivirus patches.

17. Which tool is commonly used to scan for malware signatures on an infected system?

18. A rootkit differs from standard malware in that it ____ system-level access and hides its presence.

19. When isolating a compromised server, what should be disconnected first?

20. Which of the following is a primary characteristic of ransomware?