A suspicious script was found on a sensitive research system. Subsequent analysis determined that proprietary data would have been deleted from both the local server and backup media immediately following a specific administrator’s removal from an employee list that is refreshed each evening. Which of the following BEST describes this scenario?
This scenario describes a logic bomb. A logic bomb is malware that executes a malicious action when specific conditions are met. In this case, the condition is the removal of a specific administrator from the employee list, which triggers the deletion of proprietary data from both the local server and backup media. Backdoors and rootkits do not fit this specific scenario, and a time bomb is triggered by a specific date or time, rather than an event like the removal from an employee list.
The answer is D. Logic bomb. In this case, the logic bomb would delete the proprietary data when the specific administrator is removed from the employee list.
Hi Man, have you taken the exam? Can you share some tips?