SY0-301 · Question #291
A trojan was recently discovered on a server. There are now concerns that there has been a security breach that allows unauthorized people to access data. The administrator should be looking for the…
The correct answer is B. Backdoor. After a trojan infection, administrators should look for a backdoor, which is a mechanism that allows attackers to bypass authentication and maintain unauthorized access to a system.
Question
A trojan was recently discovered on a server. There are now concerns that there has been a security breach that allows unauthorized people to access data. The administrator should be looking for the presence of a/an:
Options
- ALogic bomb.
- BBackdoor.
- CAdware application.
- DRootkit.
How the community answered
(27 responses)- A4% (1)
- B85% (23)
- C7% (2)
- D4% (1)
Why each option
After a trojan infection, administrators should look for a backdoor, which is a mechanism that allows attackers to bypass authentication and maintain unauthorized access to a system.
A logic bomb is malicious code that executes only when a specific condition is met, not a mechanism for providing ongoing unauthorized remote access.
A backdoor is a covert method of bypassing normal authentication to gain persistent, unauthorized access to a system. Trojans are commonly used to install backdoors, giving attackers ongoing access to steal or manipulate data without detection.
Adware is software that displays unwanted advertisements and does not provide attackers with unauthorized access to system data.
A rootkit is designed to hide the presence of malware or an attacker's activities on a system, but it is not itself the mechanism that grants unauthorized data access.
Concept tested: Backdoor identification after trojan infection
Source: https://attack.mitre.org/techniques/T1543/
Topics
Community Discussion
No community discussion yet for this question.