200-201 Question 275
Single answerA cybersecurity analyst is investigating suspicious activity on a network. During the analysis, they find an email attachment that, when executed, installs a program designed to steal sensitive data from the system. Which type of payload is most likely involved in this scenario?
- A
Trojan-based payload
- B
Exploit-based payload
- C
Ransomware payload
- D
Keylogger payload
Show answer and explanation
Correct answer: A
Explanation
The described scenario involves a malicious program disguised as a legitimate email attachment that, when executed, steals sensitive data. This is characteristic of a Trojan-based payload, which relies on user action to deliver its malicious functionality.
- A. Correct.
A Trojan-based payload disguises itself as legitimate software to trick users into executing it, often delivering malicious code to steal data or further compromise the system. This matches the described behavior.
- B. Incorrect.
An exploit-based payload leverages vulnerabilities in software or systems to execute malicious code, but the scenario describes a user executing an attachment, not an exploit.
- C. Incorrect.
A ransomware payload is designed to encrypt data and demand payment for decryption, which does not align with the described activity of stealing sensitive data.
- D. Incorrect.
A keylogger payload specifically records keystrokes on a system, but the scenario involves more general data theft rather than keystroke logging.