Solved

A Security Analyst Believes an Employee's Workstation Has Been Compromised

question 202

Multiple Choice

A security analyst believes an employee's workstation has been compromised. The analyst reviews the system logs, but does not find any attempted logins. The analyst then runs the diff command, comparing the C:\Windows\System32 directory and the installed cache directory. The analyst finds a series of files that look suspicious. One of the files contains the following commands: $A security analyst believes an employee's workstation has been compromised. The analyst reviews the system logs, but does not find any attempted logins. The analyst then runs the diff command, comparing the C:\Windows\System32 directory and the installed cache directory. The analyst finds a series of files that look suspicious. One of the files contains the following commands: Which of the following types of malware was used? A) Worm B) Spyware C) Logic bomb D) Backdoor$ Which of the following types of malware was used?

Definitions:

Voucher System

A set of procedures that uses vouchers for authorizing and recording liabilities and cash payments.

Internal Control

A process implemented by a company to ensure the integrity of financial and accounting information, meet operational and profitability targets, and transmit management policies throughout the organization.

Cash Payments

Transactions that involve the immediate outflow of cash to settle obligations or purchase goods and services.

Internal Control System

Procedures and processes implemented by a company to ensure the integrity of financial and accounting information, promote accountability, and prevent fraud.