To ensure persistent access, the attacker deploys a complex network of backdoors and malware across the company’s infrastructure. These tools are designed to automatically adapt and mutate to avoid detection by antivirus software and to re-establish connections if discovered and removed. How can persistent threats like these be most effectively detected and eradicated?Routine penetration testing and red team exercisesDeploying behavior-based threat detection solutionsFrequent updates and scans by antivirus softwareEnhanced endpoint detection and response (EDR) mechanisms

Given the constant evolution of malware threats, maintaining cybersecurity within an organization requires a comprehensive strategy encompassing various countermeasures. Which of the following options best represents a holistic approach to combating malware?Group of answer choicesLimiting internet access to only a few pre-approved websites and disabling email attachments for all users.Conducting regular employee training sessions on security best practices, installing reputable antivirus software on all devices, using firewalls, and performing frequent backups of critical data.Implementing a single, highly-rated antivirus software solution and ensuring it is updated regularly.Relying solely on a state-of-the-art firewall to monitor and control incoming and outgoing network traffic based on predetermined security rules.

Given the constant evolution of malware threats, maintaining cybersecurity within an organization requires a comprehensive strategy encompassing various countermeasures. Which of the following options best represents a holistic approach to combating malware?Group of answer choicesRelying solely on a state-of-the-art firewall to monitor and control incoming and outgoing network traffic based on predetermined security rules.Implementing a single, highly-rated antivirus software solution and ensuring it is updated regularly.Conducting regular employee training sessions on security best practices, installing reputable antivirus software on all devices, using firewalls, and performing frequent backups of critical data.Limiting internet access to only a few pre-approved websites and disabling email attachments for all users.

Question12Max. score: 2.00After establishing persistent access, the attacker aims to disrupt the organization's operational integrity by targeting the internal command and control (C&C) mechanisms. This includes manipulating scheduled tasks, altering automated workflows, and corrupting the integrity of administrative tools to sow chaos and further hide their tracks. How can organizations detect unauthorized alterations in their command and control mechanisms?By deploying artificial intelligence (AI) based anomaly detection systemsConducting daily manual audits of all system and network configurationsRelying on external audits for periodic security assessmentsUtilizing a decentralized model for all administrative controls

What is a common technique used by malware to evade detection by antivirus software?

1. Explain the differences between the following pair of computer exploits/attacks– Viruses, and Worms,–Trojan horses, and rootkits–Phishing and spam–A Distributed Denial- of-Service (DDoS) and  Botnets– Honeypot and Back Doors2. Differentiate between the following  computer criminals–A cracker and script skiddier–A cyberterrorist and cyberwarfare 3. Explain how antivirus programs are used to detect viruses and remove them to safeguard computers 4. As a company’s security analyst, outline the process of assessing  computer security-related risks  and how to establish and implement an IT security policy for your organisation.