nerdexam
IISFA

II0-001 · Question #203

Trojan Horse programs are capable of the following except

The correct answer is F. All of the above are possible. Option F ("All of the above are possible") is correct because Trojan Horse programs are full-featured remote access tools - there is no capability listed that falls outside what a typical Remote Access Trojan (RAT) can do. The "distractors" (A through E) are all real…

Question

Trojan Horse programs are capable of the following except

Options

  • ARemotely viewing of target system's screen output
  • BModifying files
  • COpening a CDROM drive
  • DViewing webcam installed
  • EKeylogging
  • FAll of the above are possible

How the community answered

(29 responses)
  • B
    3% (1)
  • D
    10% (3)
  • E
    3% (1)
  • F
    83% (24)

Explanation

Option F ("All of the above are possible") is correct because Trojan Horse programs are full-featured remote access tools - there is no capability listed that falls outside what a typical Remote Access Trojan (RAT) can do.

The "distractors" (A through E) are all real, well-documented Trojan capabilities: remote screen viewing (e.g., via VNC-style modules), file modification (creating, deleting, or encrypting files), CDROM control (a classic payload used to demonstrate physical device access), webcam access (silent video capture without the indicator light), and keylogging (capturing passwords and keystrokes). Each of these has been implemented in widely-analyzed RATs like DarkComet, njRAT, and SubSeven.

The question is designed to test whether you underestimate the scope of Trojans - many students assume one of the hardware-control options (webcam or CDROM) is a stretch, but RATs operate at the OS/driver level and can interact with any device the OS exposes.

Memory tip: Think of a RAT as giving an attacker a ghost seat at the victim's computer - if a human sitting there could do it, the Trojan probably can too. When you see "except" questions about Trojan capabilities, the trap is always assuming hardware control is out of reach.

Community Discussion

No community discussion yet for this question.

Full II0-001 Practice