GIAC GSLC Exam - Topic 1 Question 69 Discussion

Actual exam question for GIAC's GSLC exam

Question #: 69
Topic #: 1

You work as a Network Administrator for Infosec Inc. The company has a Windows 2003-based server. You have installed McAfee antivirus as well as anti-spyware software on the server. One day, you come to know that not only have the security applications running on the server (including software firewalls, anti-virus, and anti-spyware) been disabled, but the anti-virus and anti-spyware definitions have also been deleted. You suspect that this is due to malware infection. Which of the following types of malware is the most likely cause of the issue?

AWhack-A-Mole

BFireKiller 2000

CBeast

DSubSeven

Show Suggested Answer

Suggested Answer: B

by Brett at Apr 04, 2025, 12:01 PM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Olga

7 months ago

Beast is pretty nasty too, but FireKiller seems more likely here.

upvoted 0 times

...

Buddy

8 months ago

Wait, are we sure this isn't just a user error?

upvoted 0 times

...

Deandrea

8 months ago

I think it could be SubSeven, it's known for disabling security.

upvoted 0 times

...

Kristian

8 months ago

Sounds like a classic case of FireKiller 2000.

upvoted 0 times

...

Kate

8 months ago

Definitely not Whack-A-Mole, that one's harmless!

upvoted 0 times

...

Linwood

9 months ago

SubSeven seems familiar, but I thought it was more about remote access rather than disabling security features.

upvoted 0 times

...

Katie

9 months ago

I practiced a similar question where malware targeted antivirus software, but I can't recall the exact name.

upvoted 0 times

...

Maryln

9 months ago

I think FireKiller 2000 sounds like it could be the right answer since it implies it kills security programs.

upvoted 0 times

...

Gladis

9 months ago

I remember studying about malware types, but I'm not sure which one specifically disables security software.

upvoted 0 times

...

Royce

9 months ago

I've got a hunch it's probably SubSeven, since that type of malware is known for disabling security software and covering its tracks. But I'll double-check the other options just to be sure.

upvoted 0 times

...

Carmela

10 months ago

I'm a bit stumped on this one. The question doesn't provide a lot of specifics, so I'll need to draw on my knowledge of different malware types and their common tactics. Gotta think this through step-by-step.

upvoted 0 times

...

Samira

10 months ago

Okay, let's see. Based on the details provided, I'm guessing this is probably a Trojan or rootkit-type malware that's designed to evade detection and disable security measures. I'll have to weigh the options carefully.

upvoted 0 times

...

Carman

10 months ago

Hmm, disabling security software and deleting definitions sounds like the work of a pretty sophisticated malware. I'm not sure which one would be the most likely cause.

upvoted 0 times

...

Alica

10 months ago

This seems like a tricky one. I'll need to think carefully about the different types of malware and their typical behaviors.

upvoted 0 times

...

Barbra

1 year ago

Haha, 'FireKiller 2000'? Sounds like the name of a rejected Marvel superhero. But I'd still go with that one, just for the entertainment factor.

upvoted 0 times

Yaeko

1 year ago

User 3: I agree with Yaeko, let's focus on finding the real cause of the problem.

upvoted 0 times

...

Louann

1 year ago

User 2: Louann, that's funny! But I think we should take this malware issue seriously.

upvoted 0 times

...

Tesha

1 year ago

User 1: Haha, 'FireKiller 2000'? Sounds like the name of a rejected Marvel superhero.

upvoted 0 times

...

Lauran

1 year ago

I'm going with A. 'Whack-A-Mole' - it's like the malware version of that arcade game, popping up everywhere and evading detection.

upvoted 0 times

Frederic

1 year ago

User1: True, SubSeven is known for its remote access capabilities, could have caused the issue.

upvoted 0 times

...

Socorro

1 year ago

User3: I've heard of SubSeven being a pretty nasty one too, could be that.

upvoted 0 times

...

Marvel

1 year ago

User2: Yeah, it does sound like a sneaky malware, constantly avoiding detection.

upvoted 0 times

...

Ashlyn

1 year ago

User1: I think it might be Whack-A-Mole too, always popping up unexpectedly.

upvoted 0 times

...

Fannie

1 year ago

B. 'FireKiller 2000' - because who doesn't love a malware with a badass name like that? Definitely the culprit.

upvoted 0 times

Kimbery

1 year ago

User 3: Let's focus on getting rid of it first.

upvoted 0 times

...

Charlesetta

1 year ago

User 2: Yeah, that name does sound pretty intense.

upvoted 0 times

...

Darell

1 year ago

User 1: I think it might be FireKiller 2000.

upvoted 0 times

...

Tamar

1 year ago

I'm not sure, but I think Beast malware is also known for disabling security software.

upvoted 0 times

...

Larae

1 year ago

I agree with Christiane, SubSeven is a remote access Trojan that can disable security applications.

upvoted 0 times

...

Celia

1 year ago

D. 'SubSeven' has got to be the answer here. It's a notorious remote access Trojan, perfect for taking down antivirus and firewalls.

upvoted 0 times

Jeff

1 year ago

Definitely, we should also regularly update our security software to prevent such attacks.

upvoted 0 times

...

Cherelle

1 year ago

We need to make sure our servers are protected against these kinds of threats.

upvoted 0 times

...

Janessa

1 year ago

It's scary how malware like that can disable security applications so easily.

upvoted 0 times

...

Renea

1 year ago

I think you're right, SubSeven is a powerful remote access Trojan.

upvoted 0 times

...

Gwen

1 year ago

Hmm, this one's tricky. I'm leaning towards C. 'Beast' - it sounds like the kind of malware that would try to disable security measures.

upvoted 0 times

Crista

1 year ago

I think 'SubSeven' could also be a possibility, it's known for disabling security software.

upvoted 0 times

...

Harrison

1 year ago

I agree, 'Beast' does sound like it could be the culprit.

upvoted 0 times

...

Christiane

1 year ago

I think the most likely cause of the issue is SubSeven.

upvoted 0 times

...