DUMAGUING, VERONICA T.

BSIT 101I

1) Part of host hardening is to reduce the attack surface. What configuration changes does reducing the attack surface
involve?

- By closing unused network ports, uninstalling undesirable applications, and turning off OS features and services that
are not being used.

2) What is the main difference between virus and worm malware?

- The primary difference between a virus and a worm is that worms are standalone malicious programs that can self-
replicate and spread once they have gained access to the system, whereas viruses require the activation of their host in
order to begin functioning.

3) How might malware hosted on a website be able to infect your computer simply by your browsing the site?

- Through the use of a flaw in computer software that has been installed on it

4) How might spyware be able to steal a password?

- Most frequently by keeping track of keystrokes. It might also have the ability to decrypt and steal password databases.

5) What type of malware is being described? The malware encrypts the user's documents folder and any attached
removable disks then extorts the user for money to release the encryption key.

- Ransomware

6) True or false? Most anti-virus software can remediate a system by blocking access to an infected file but not actually
deleting it.

- True

7) What is the main means by which anti-virus software identifies infected files?

- Making use of the definitions or signatures of recognized viral code. These definitions need to be maintained current.

8) What are the two main ways that spam might expose recipients to hazardous content?

- Through malicious website links and malware-infected attachments

9) Your friend sent you an email link, which you have opened, and now the browser is asking whether you should install
a plug-in to view all the content on the page. Should you proceed?

- No, this is a typical phishing attack, and your friend's computer might already be infected with a virus or Trojan horse.
First, be sure they sent the link in good faith.

10) True or false? An OEM site is a reputable source of management software

and drivers for a particular system.

- True