nerdexam
GIAC

GSLC · Question #549

Which of the following tasks can be performed by a malicious bot/botnet? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Harvesting email addresses from contact forms or guestbook pages. C. Downloading entire Web site to suck the bandwidth of a target. D. Stealing various information like credit card numbers, login, ids, etc. E. Performing DDoS attacks. Botnets are networks of compromised machines used to automate large-scale malicious tasks. Spoofing is not a primary botnet function and is excluded from the correct answers.

Security Operations & Incident Response Leadership

Question

Which of the following tasks can be performed by a malicious bot/botnet? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AHarvesting email addresses from contact forms or guestbook pages.
  • BPerforming a spoofing attack.
  • CDownloading entire Web site to suck the bandwidth of a target.
  • DStealing various information like credit card numbers, login, ids, etc.
  • EPerforming DDoS attacks.

How the community answered

(39 responses)
  • A
    90% (35)
  • B
    10% (4)

Why each option

Botnets are networks of compromised machines used to automate large-scale malicious tasks. Spoofing is not a primary botnet function and is excluded from the correct answers.

AHarvesting email addresses from contact forms or guestbook pages.Correct

Bots routinely scrape websites for email addresses from contact forms and guestbook pages to build spam lists, which is one of the most common botnet use cases.

BPerforming a spoofing attack.

Spoofing is a manual attack technique - typically crafting false identities or packet headers - and is not an automated task performed autonomously by bots or botnets as a standalone function.

CDownloading entire Web site to suck the bandwidth of a target.Correct

Botnets can be directed to repeatedly download an entire website, consuming the target's bandwidth and effectively causing a denial-of-service condition.

DStealing various information like credit card numbers, login, ids, etc.Correct

Compromised bot machines can run keyloggers and credential-harvesting malware to steal credit card numbers, login credentials, and other sensitive data.

EPerforming DDoS attacks.Correct

DDoS attacks are one of the most well-known botnet capabilities, where thousands of bots flood a target simultaneously to overwhelm its resources.

Concept tested: Botnet capabilities and attack functions

Source: https://www.cisa.gov/sites/default/files/publications/Botnet%20Guide.pdf

Topics

#botnet#DDoS#malware capabilities#spam harvesting

Community Discussion

No community discussion yet for this question.

Full GSLC Practice