LabYard_

Malware Threats

Answer all 15 questions, then submit. You need 75% to pass. If you don't pass, the reattempt unlocks after 24 hours.

Q1. Adware is primarily concerned with:

Escalating privilege Destroying the boot sector Encrypting data Displaying or injecting advertising, often with tracking

Q2. Malware persistence on Linux is commonly achieved via:

The swap partition ARP tables The BIOS only cron jobs, systemd units or shell profile files

Q3. DNS tunnelling is used by malware to:

Poison the cache Speed up resolution Cache records Move data in and out where only DNS is permitted

Q4. A logic bomb executes when:

The system boots The user logs in A specific condition such as a date or event is met A file is opened

Q5. A wiper differs from ransomware because a wiper:

Asks for a smaller ransom Encrypts reversibly Destroys data with no intention of recovery Only targets backups

Q6. Which is another malware symptom?

Faster startup More secure configurations Fewer crashes Modified or deleted files

Q7. A macro virus is delivered through:

DNS responses PNG images Firmware updates Office documents containing embedded scripting

Q8. Time-delayed execution is used by malware to:

Reduce file size Improve compatibility Outlast the short observation window of an automated sandbox Increase infection speed

Q9. A Trojan generally cannot:

Replicate by itself Monitor activity Steal data Modify files

Q10. A botnet is best described as:

A type of firewall A network of compromised machines under a common command channel An encryption protocol A scanning tool

Q11. Malicious adware may:

Only patch software Only improve browsing Change browser settings and collect data Only encrypt backups

Q12. Polymorphic malware evades signature detection by:

Using encryption only Changing its own code pattern on each infection Running slowly Deleting itself

Q13. Keyloggers are a type of:

Spyware Firewall Worm Adware only

Q14. EDR differs from traditional antivirus because it:

Only scans files on write Works only offline Needs no agent Records endpoint behaviour and supports investigation and response

Q15. Ransomware's core mechanism is to:

Advertise products Steal passwords Encrypt or lock data and demand payment for recovery Mine cryptocurrency

LabYard · hands-on security & data training · flags look like ctflab{...}