GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ272

Malware and AI Assisted Investigations

Which of the following provides the most helpful protection for a host against application-level backdoor Trojans infecting the system?

  • A Install a personal firewall on the host which only allows outbound TCP/UDP connections.
  • B Block all incoming network connections to the host.
  • C Install up to date anti-virus software on the host.
  • D Create an access control list on the switch to always block traffic to the host on TCP ports 135-139.
Explanation

Up-to-date antivirus software provides host-level detection and prevention of Trojan malware, including malicious payloads delivered through applications, downloads, or email. Network restrictions alone do not reliably stop all infection vectors or detect a Trojan that reaches the host.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!