A method of countermeasure for trojan horse is which one of the following:

Question

Options

• AView network connections with the netstat command
• BUse the trojdel32 utility to search for unregistered DLL files
• CPlace a disk thrashing utility on the suspect system
• DPerform background checks on all system administrators

• A
  78% (43)
• B
  13% (7)
• C
  4% (2)
• D
  5% (3)

Explanation

Netstat reveals active and listening network connections, which is a direct countermeasure against Trojan horses because most Trojans open backdoor ports or establish outbound connections to command-and-control servers. Running netstat -an lets you spot unusual listening ports or suspicious remote connections that indicate a Trojan may be present and communicating.

Why the distractors are wrong:

• B - "trojdel32" is a fictitious utility; no such standard tool exists, making this a classic distractor based on a plausible-sounding name.
• C - Disk thrashing (maxing out disk I/O) has no logical connection to detecting or removing Trojans; it would just degrade system performance.
• D - Background checks on admins is a personnel/HR control, not a technical countermeasure for malware already on a system.

Memory tip: Think "Trojan = hidden open door." netstat is your way to see all open doors on the system - if there's an unexpected one, a Trojan may have unlocked it. The command name even sounds like "net status," i.e., what is my network actually doing right now?

No community discussion yet for this question.