Blocking Malware and Other Attacks

Question 1

What 4 common security controls can protect against malware?

Answer 1

1) spam filter on mail gateway
2) anti-malware on mail gateway
3) hosts/server anti-malware
4) boundary security devices - firewalls or UTMs

Question 2

What must admins be aware to do when downloading and installing signature files manually?

Answer 2

they should compare the hash of signature file on the anti-virus site with the hash of the downloaded file

Question 3

How does heuristic-based analysis detect polymorphic malware?

Answer 3

by checking for variations in copies of applications

Question 4

what malware protection mechanism prevents malware from executing code in certain regions of memory? Where would you enable it?

Answer 4

Data Execution Prevention

Enabled in the BIOS or UEFI (the newer replacement of the BIOS)

Question 5

In a well setup network, on what devices would find spam filters?

Answer 5

1) on UTMs
2) On email gateways
3) On user’s email clients
All 3 together!