What is the major difference between a worm and a Trojan horse?

1. A. A worm spreads via e-mail, while a Trojan horse does not.
2. B. A worm is a form of malicious program, while a Trojan horse is a utility.
3. C. A worm is self replicating, while a Trojan horse is not.
4. D. A Trojan horse is a malicious program, while a worm is an anti-virus software.

Correct Answer: C

You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linux- based server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

1. A. Brute force
2. B. Replay
3. C. XSS
4. D. Cookie poisoning

Correct Answer: A

Your friend plans to install a Trojan on your computer. He knows that if he gives you a new version of chess.exe, you will definitely install the game on your computer. He picks up a Trojan and joins it to chess.exe. The size of chess.exe was 526,895 bytes originally, and after joining this chess file to the Trojan, the file size increased to 651,823 bytes. When he gives you this new game, you install the infected chess.exe file on your computer. He now performs various malicious tasks on your computer remotely. But you suspect that someone has installed a Trojan on your computer and begin to investigate it. When you enter the netstat command in the command prompt, you get the following results:
C:WINDOWS>netstat -an | find "UDP" UDP IP_Address:31337 *:*
Now you check the following registry address:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices
In the above address, you notice a 'default' key in the 'Name' field having " .exe" value in the corresponding 'Data' field. Which of the following Trojans do you think your friend may have installed on your computer on the basis of the above evidence?

1. A. Qaz
2. B. Donald Dick
3. C. Tini
4. D. Back Orifice

Correct Answer: D

You work as a System Administrator in SunSoft Inc. You are running a virtual machine on Windows Server 2003. The virtual machine is protected by DPM. Now, you want to move the virtual machine to another host. Which of the following steps can you use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

1. A. Remove the original virtual machine from the old server and stop the protection for the original virtual machine.
2. B. Run consistency check.
3. C. Add the copied virtual machine to a protection group.
4. D. Copy the virtual machine to the new server.

Correct Answer: ACD

Adam works as a Security Analyst for Umbrella Inc. Company has a Windows-based network. All computers run on Windows XP. Manager of the Sales department complains Adam about the unusual behavior of his computer. He told Adam that some pornographic contents are suddenly appeared on his computer overnight. Adam suspects that some malicious software or Trojans have been installed on the computer. He runs some diagnostics programs and Port scanners and found that the Port 12345, 12346, and 20034 are open. Adam also noticed some tampering with the Windows registry, which causes one application to run every time when Windows start.
Which of the following is the most likely reason behind this issue?

1. A. Cheops-ng is installed on the computer.
2. B. Elsave is installed on the computer.
3. C. NetBus is installed on the computer.
4. D. NetStumbler is installed on the computer.

Correct Answer: C