nerdexam
CIW

1D0-61C · Question #8

A friend has called you about a possible computer problem because her computer is acting strangely. Sounds play unexpectedly, the monitor turns off suddenly, the hard-drive light flashes constantly…

The correct answer is C. The computer has been infected with an illicit server. Option C is correct because an illicit server (commonly a Remote Access Trojan/RAT) installs hidden server software that opens ports and grants a remote attacker interactive control over the victim's machine - directly explaining the erratic sounds, monitor behavior, reboots…

Network Security

Question

A friend has called you about a possible computer problem because her computer is acting strangely. Sounds play unexpectedly, the monitor turns off suddenly, the hard-drive light flashes constantly, the computer sometimes reboots itself without warning. When you inspect your friend's system, you notice that several ports are open. Which of the following is most likely the cause of these symptoms?

Options

  • AThe computer has been infected with a polymorphic virus.
  • BThe computer is experiencing a denial-of-service attack.
  • CThe computer has been infected with an illicit server.
  • DThe computer has been infected by a worm.

How the community answered

(65 responses)
  • A
    5% (3)
  • B
    8% (5)
  • C
    85% (55)
  • D
    3% (2)

Explanation

Option C is correct because an illicit server (commonly a Remote Access Trojan/RAT) installs hidden server software that opens ports and grants a remote attacker interactive control over the victim's machine - directly explaining the erratic sounds, monitor behavior, reboots, and constant disk activity, all of which look like someone else is using the computer remotely.

Why the distractors are wrong:

  • A (Polymorphic virus): Polymorphic viruses focus on self-replication while evading detection by mutating their code. They don't inherently open ports or enable remote control, so they wouldn't produce this interactive symptom pattern.
  • B (DoS attack): A denial-of-service attack overwhelms a system with traffic from the outside - it's not an infection and wouldn't cause sounds, screen shutdowns, or reboots; it would make the machine slow or unreachable.
  • D (Worm): Worms self-propagate across networks and can cause bandwidth issues, but they don't establish remote control sessions that would produce interactive symptoms like unexpected sounds or a monitor turning off.

Memory tip: Picture "illicit server" as a squatter who secretly moved into your computer and is running their own operation from inside - the open ports are the unlocked doors they use to get in and out, and the strange activity is them rummaging around while you're home.

Topics

#malware identification#open ports#backdoor/illicit server#system compromise

Community Discussion

No community discussion yet for this question.

Full 1D0-61C Practice