Fundamentals of InfoSecintermediate
Match each malware type to its corresponding description: Malware Types: - Downloader - Keylogger - Scareware - Botnet Descriptions: - Fetches and installs additional malicious payloads onto an infected system - Silently records keystrokes to harvest credentials and sensitive data - Uses alarming fake alerts to manipulate the user into taking an urgent action - A collection of infected devices coordinated by a central command-and-control server
Answer
Downloader - Fetches and installs additional malicious payloads onto an infected system, Keylogger - Silently records keystrokes to harvest credentials and sensitive data, Scareware - Uses alarming fake alerts to manipulate the user into taking an urgent action, Botnet - A collection of infected devices coordinated by a central command-and-control server
Explanation
### The pairs
| Item | Matches | Why |
|---|---|---|
| Downloader | Downloads other malware | It is malware whose main role is to fetch additional malicious software, often after an attacker has gained initial access. |
| Information-stealing malware | Captures information using tools such as keyloggers | A keylogger records keystrokes, which may expose information entered by a user. |
| Scareware | Frightens a user into taking an action | It uses fear or alarming claims to pressure the user. |
| Botnet | Infected computers receive instructions from a shared command-and-control server | A botnet is a group of infected computers directed through a common control point. |
### The concept
These labels classify malware by function. A downloader fetches another threat, information-stealing malware collects data, scareware manipulates a user, and a botnet describes coordinated infected machines.
### Terms
- **Keylogger**: A tool that records keystrokes.
- **Botnet**: A group of infected computers controlled or coordinated by an attacker.
- **Command-and-control server**: A server used to send instructions to compromised systems.
### Remember
Classify malware by what role it performs, not only by how it arrived.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free