GSLC-2020: GIAC Security LeadershipDemo

By GIAC · Question Mode

QuestionQ33

Vulnerability Management

You are a Network Administrator for Infosec Inc. The company operates a Windows 2003-based server. McAfee antivirus and anti-spyware software are installed on the server.

One day, you discover that the security applications running on the server—including software firewalls, antivirus, and anti-spyware—have been disabled, and that the antivirus and anti-spyware definitions have also been deleted. You suspect a malware infection.

Which of the following types of malware is the most likely cause of this issue?

  • A Whack-A-Mole
  • B FireKiller 2000
  • C Beast
  • D SubSeven
Explanation

FireKiller 2000 is a security-software killer that disables or terminates antivirus and firewall protections and can render their installed components unusable. That behavior directly accounts for the disabled firewall, antivirus, and anti-spyware applications and the removed security definitions.

Community Discussion

No comments yet. Be the first to start the discussion!