QuestionQ20

Malware Incidents

An attack involving malicious code delivered through emails is considered a:

  • A Malware based attack
  • B Email attack
  • C Inappropriate usage incident
  • D Multiple component attack
Explanation

Incident categorization frameworks used in incident handling classify an incident primarily by the nature of the malicious activity involved rather than by the channel used to deliver it; an attack in which malicious code (a virus, worm, trojan, or other malware) is delivered as an email attachment or link is fundamentally a malicious-code incident, with email serving only as the delivery vector, so it is classified as a malware-based attack rather than as a distinct "email attack" category or a multiple-component incident, since no additional independent incident type (such as denial of service or unauthorized access) is inherently combined with it.

Community Discussion

No comments yet. Be the first to start the discussion!