IPA IP 2021 Question 94
A question IPA Japan published in 令和3年度 ITパスポート試験 公開問題 問94, translated into English. ITPEC is based on the same exams.
Which of the following is used in targeted attacks such as illegally obtaining important information from a specific PC, and operates the target PC of the attack remotely to make it send and receive files, execute commands, and do other such things?
Explanation
RAT — a Remote Access Tool (or Trojan) gives the attacker remote control of an infected PC.
In a targeted attack the attacker gets a RAT onto a chosen PC, often through an e-mail attachment written for that organisation. The RAT then connects out to the attacker's server and takes orders from it: sending and receiving files, running commands, capturing the screen or keystrokes. The attacker uses it to look around the network and take out important information.
Answer (a)
Why not others:
- •(b) VPN — a virtual private network protects communication over a public network with tunnelling and encryption; it is not a tool for controlling someone else's PC
- •(c) Device driver — software through which the OS controls a peripheral device such as a printer
- •(d) Ransomware — malware that encrypts the victim's files and demands a ransom for the key; it holds data hostage rather than giving remote control
Key rule: Malware that lets an attacker operate a PC from outside (files, commands) is a RAT; malware that locks data for money is ransomware.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.