Refer to the Exhibit

question 48

Multiple Choice

Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?

• A) The malware is performing comprehensive fingerprinting of the host, including a processor, motherboard manufacturer, and connected removable storage.
• B) The malware is a ransomware querying for installed anti-virus products and operating systems to encrypt and render unreadable until payment is made for file decryption.
• C) The malware has moved to harvesting cookies and stored account information from major browsers and configuring a reverse proxy for intercepting network activity.
• D) The malware contains an encryption and decryption routine to hide URLs/IP addresses and is storing the output of loggers and webcam captures in locally encrypted files for retrieval.

---

Definitions:

Allowance for Doubtful Accounts

A financial accounting provision estimating the portion of accounts receivable that may not be collectible.

Uncollectible

Refers to accounts receivable that are unlikely to be recovered and are therefore considered as bad debt.

Allowance Method

An accounting technique used to account for potential uncollectible receivables by estimating and recording bad debts expense ahead of specific account identifications.

Uncollectible Receivables

Receivables from sales or loans that are not expected to be collected, often written off as bad debts.