Practitioner Practice Questions

SaaS financial botnets are often sold as kits, enabling attackers to license and reuse the malicious code easily.

These kits allow attackers to build and operate their own botnets, often targeting financial data or systems.

Financial botnets are typically smaller but more targeted than spamming or DDoS botnets. Botnets are not a defense mechanism, but rather a threat.

Signature-based systems struggle with polymorphic or obfuscated malware, which changes its code to avoid detection. Signature-based detection relies on static databases of known threat signatures, limiting its ability to identify new or unknown threats.

Personally identifiable information (PII) is any data that can be used to identify someone. All information that directly or indirectly links to a person is considered PII1. Among PII, some pieces of information are more sensitive than others. Sensitive PII is sensitive information that directly identifies an individual and could cause significant harm if leaked or stolen2. Birthplace and name are examples of sensitive PII, as they can be used to distinguish or trace an individual’s identity, either alone or when combined with other information3. Login 10 and profession are not considered sensitive PII, as they are not unique to a person and do not reveal their identity. Login 10 is a non-sensitive PII that is easily accessible from public sources, while profession is not a PII at all, as it does not link to a specific individual4. References:

1: What is PII (personally identifiable information)? - Cloudflare

2: What is Personally Identifiable Information (PII)? | IBM

3: personally identifiable information - Glossary | CSRC

4: What Is Personally Identifiable Information (PII)? Types and Examples