ITPEC IP October 2019 Question 40
Topic: SecurityAlso asked in October 2025
Which of the following is an appropriate combination of the descriptions (i) through (iii) about threats in information security and the terms below?
(i)An attack in which a malicious script injected to a web site that displays data that a visitor enters as it is, is executed on the visitor’s web browser, and data such as cookies are stolen by a third party(ii)A program that infects numerous PCs, executes malicious operations on the PCs by following instructions received via a network, and conducts a coordinated attack(iii)A program that is disguised as a useful program, but once installed and executed, performs unauthorized data destruction or leakage
Explanation
(i) Cross-site scripting, (ii) Bot, (iii) Trojan horse — each description names the defining behaviour of one threat.
- •(i) A site that echoes visitor input into its page unescaped lets an attacker inject a script; the script then runs in the visitor's browser and can send the site's cookies to the attacker. That is cross-site scripting (XSS).
- •(ii) Malware that infects many PCs and waits for commands from the attacker over the network (a C&C server), so they attack together (for example a DDoS), is a bot.
- •(iii) A program that looks useful but, once installed and run, destroys or leaks data is a Trojan horse.
Answer (b)
Why not others:
- •(a) — swaps (ii) and (iii): taking orders over the network defines a bot, disguise as a useful program defines a Trojan horse
- •(c) — a targeted attack aims at a chosen organisation, usually with tailored e-mail, not at every visitor of a vulnerable site; and XSS is an attack through a web site, not a program infecting PCs
- •(d) — targeted attack for (i) as in (c), and swaps the others: a Trojan horse is not directed over the network, and XSS is not a disguised program
Key rule: Identify malware and attacks by behaviour: injected script run in a visitor's browser (XSS), remote-controlled infected PCs (bot), harmful code disguised as useful (Trojan horse).
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.