SY0-301 · Question #814
Pete, a security analyst, has been tasked with explaining the different types of malware to his colleagues. The two malware types that the group seems to be most interested in are botnets and viruses.
The correct answer is B. Botnets are a subset of malware which are used as part of DDoS attacks.. Botnets are networks of malware-infected machines controlled remotely and are commonly leveraged to conduct Distributed Denial of Service (DDoS) attacks, while viruses are self-replicating malware that attach to files.
Question
Pete, a security analyst, has been tasked with explaining the different types of malware to his colleagues. The two malware types that the group seems to be most interested in are botnets and viruses. Which of the following explains the difference between these two types of malware?
Options
- AViruses are a subset of botnets which are used as part of SYN attacks.
- BBotnets are a subset of malware which are used as part of DDoS attacks.
- CViruses are a class of malware which create hidden openings within an OS.
- DBotnets are used within DR to ensure network uptime and viruses are not.
How the community answered
(45 responses)- A2% (1)
- B87% (39)
- C2% (1)
- D9% (4)
Why each option
Botnets are networks of malware-infected machines controlled remotely and are commonly leveraged to conduct Distributed Denial of Service (DDoS) attacks, while viruses are self-replicating malware that attach to files.
Viruses are not a subset of botnets; they are an independent category of malware that self-replicates by attaching to legitimate files, and a SYN flood attack is a network-layer technique not specific to viruses.
A botnet is a collection of internet-connected devices infected with malware and controlled by a command-and-control server. The coordinated nature of a botnet - potentially comprising thousands or millions of compromised hosts - makes it the primary tool used to launch DDoS attacks by overwhelming a target with traffic from many sources simultaneously. This correctly distinguishes botnets as a subset of malware with a specific use case (DDoS), separate from the self-replicating, file-infecting behavior of viruses.
Creating hidden openings or backdoors within an operating system describes a rootkit or a Trojan, not a virus; viruses are defined by their self-replicating behavior.
Botnets are offensive attack tools used by threat actors and have no role in legitimate disaster recovery operations.
Concept tested: Botnet use in DDoS attacks vs. virus malware behavior
Source: https://www.cisa.gov/news-events/news/understanding-denial-service-attacks
Topics
Community Discussion
No community discussion yet for this question.