ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 32 - SY0-601 discussion

Report
Export

A security analyst is investigating multiple hosts that are communicating to external IP addresses during the hours of 2:00 a.m - 4:00 am. The malware has evaded detection by traditional antivirus software. Which of the following types of malware is MOST likely infecting the hosts?

A.
A RAT
Answers
A.
A RAT
B.
Ransomware
Answers
B.
Ransomware
C.
Polymophic
Answers
C.
Polymophic
D.
A worm
Answers
D.
A worm
Suggested answer: A

Explanation:

Based on the given information, the most likely type of malware infecting the hosts is a RAT (Remote Access Trojan). RATs are often used for stealthy unauthorized access to a victim's computer, and they can evade traditional antivirus software through various sophisticated techniques. In particular, the fact that the malware is communicating with external IP addresses during specific hours suggests that it may be under the control of an attacker who is issuing commands from a remote location. Ransomware, polymorphic malware, and worms are also possible culprits, but the context of the question suggests that a RAT is the most likely answer.

asked 02/10/2024
Muhanad Mohamed
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first