nerdexam
GIAC

GSLC · Question #26

Your Web server crashes at exactly the point where it reaches 1 million total visits. You discover the cause of the server crash is malicious code. Which description best fits this code?

The correct answer is B. Logic Bomb. A logic bomb is malicious code that remains dormant until a specific condition or trigger is met, such as reaching a defined counter value like 1 million visits.

Security Architecture & Engineering

Question

Your Web server crashes at exactly the point where it reaches 1 million total visits. You discover the cause of the server crash is malicious code. Which description best fits this code?

Options

  • AWorm
  • BLogic Bomb
  • CPolymorphic Virus
  • DVirus

How the community answered

(23 responses)
  • B
    87% (20)
  • C
    4% (1)
  • D
    9% (2)

Why each option

A logic bomb is malicious code that remains dormant until a specific condition or trigger is met, such as reaching a defined counter value like 1 million visits.

AWorm

A worm is self-replicating malware that spreads across networks independently; it does not trigger based on a specific condition like a counter.

BLogic BombCorrect

A logic bomb is defined as malicious code that activates only when a predetermined condition is satisfied - in this case, a visit counter reaching exactly 1 million. Unlike viruses or worms, a logic bomb does not self-replicate; it simply waits for its trigger condition. This makes it particularly dangerous because it can go undetected for extended periods before executing its payload.

CPolymorphic Virus

A polymorphic virus mutates its own code to evade detection and spreads by attaching to files, which does not describe condition-based triggering.

DVirus

A virus attaches to legitimate programs and replicates when the host is executed, but does not specifically activate based on a predefined threshold condition.

Concept tested: Logic bomb malware trigger mechanism

Source: https://www.cisa.gov/uscert/ncas/tips/ST18-271

Topics

#logic bomb#malware#trigger-based attack#malicious code

Community Discussion

No community discussion yet for this question.

Full GSLC Practice