GSLC · Question #26
Your Web server crashes at exactly the point where it reaches 1 million total visits. You discover the cause of the server crash is malicious code. Which description best fits this code?
The correct answer is B. Logic Bomb. A logic bomb is malicious code that remains dormant until a specific condition or trigger is met, such as reaching a defined counter value like 1 million visits.
Question
Your Web server crashes at exactly the point where it reaches 1 million total visits. You discover the cause of the server crash is malicious code. Which description best fits this code?
Options
- AWorm
- BLogic Bomb
- CPolymorphic Virus
- DVirus
How the community answered
(23 responses)- B87% (20)
- C4% (1)
- D9% (2)
Why each option
A logic bomb is malicious code that remains dormant until a specific condition or trigger is met, such as reaching a defined counter value like 1 million visits.
A worm is self-replicating malware that spreads across networks independently; it does not trigger based on a specific condition like a counter.
A logic bomb is defined as malicious code that activates only when a predetermined condition is satisfied - in this case, a visit counter reaching exactly 1 million. Unlike viruses or worms, a logic bomb does not self-replicate; it simply waits for its trigger condition. This makes it particularly dangerous because it can go undetected for extended periods before executing its payload.
A polymorphic virus mutates its own code to evade detection and spreads by attaching to files, which does not describe condition-based triggering.
A virus attaches to legitimate programs and replicates when the host is executed, but does not specifically activate based on a predefined threshold condition.
Concept tested: Logic bomb malware trigger mechanism
Source: https://www.cisa.gov/uscert/ncas/tips/ST18-271
Topics
Community Discussion
No community discussion yet for this question.