IPA IP 2020 Question 58
A question IPA Japan published in 令和2年度 10月 ITパスポート試験 公開問題 問58, translated into English. ITPEC is based on the same exams.
Same question on ITPEC: Oct 2024 Q36 +1 more
When a document file attached to a received e-mail is opened on a PC, the PC begins to behave abnormally. Which of the following is an appropriate suspected attack?
Explanation
Macro virus — malware hidden in a document file that runs when the document is opened.
Word processor and spreadsheet files can contain macros, small programs that automate operations. A macro virus is written in this macro language and embedded in the document, so opening the attachment (and running its macros) executes it on the PC and causes the abnormal behaviour.
Answer (d)
Why not others:
- •(a) SQL injection — sends crafted input to a web application so that it runs unintended SQL against its database
- •(b) Cross-site scripting — injects a script into a vulnerable website so that it runs in visitors' browsers
- •(c) Shoulder hacking — peeks at a screen or keyboard to steal passwords; nothing is opened on the PC
Key rule: Trouble that starts when a document is opened points to a macro virus; SQL injection and XSS attack web applications, shoulder hacking is physical observation.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.