var quiz = {
questions : [
{
text : 'Fill in the blanks: The first line of defense against malicious bots and spyware is __________ and __________.',
img : 'http://media.techtarget.com/WhatIs/images/spacer.gif',
responses : [
'a. Implement a host intrusion prevention system (HIPS) : make sure it is properly tuned',
'b. Ensure end users have basic knowledge of bots and spyware : build out a user-awareness program that focuses on malware analysis',
'c. Become familiar with the normal state of the IT infrastructure : monitor it to detect anomalies',
'd. Ensure antimalware is installed on all host devices : complement it with multiple network-based malware detection tools'
],
answer : 2,
score : 1,
expandedAnswer : '',
moreInfo : 'Looking for more lines of defense? Threat expert Ed Skoudis reveals other bot detection mechanisms.'
},
{
text : 'Which is not a method in which a carefully deployed honeypot can strengthen an enterprise\'s defensive posture?',
img : 'http://media.techtarget.com/WhatIs/images/spacer.gif',
responses : [
'a. Identify the global location of malware authors',
'b. Capture malware samples for analysis',
'c. Decrease the rate of false positives',
'd. Determine whether users visited malicious websites'
],
answer : 0,
score : 1,
expandedAnswer : '',
moreInfo : 'Fore more information, listen to author Niels Provos read from his book, "Virtual Honeypots: From Botnet Tracking to Intrusion Detection."'
},
{
text : 'Which products are necessary when defending against next-generation Web-based malware?',
img : 'http://media.techtarget.com/WhatIs/images/spacer.gif',
responses : [
'a. Antispyware',
'b. Behavioral analysis',
'c. HTTP traffic scanning',
'd. Email scanning',
'e. All of the above'
],
answer : 4,
score : 1,
expandedAnswer : '',
moreInfo : 'Learn more about how shrewd attackers are using Web attacks to bypass old security defenses.'
},
{
text : 'Which is not a best practice for large enterprises seeking to block end-user access to malicious websites?',
img : 'http://media.techtarget.com/WhatIs/images/spacer.gif',
responses : [
'a. Use antiphishing filters in Web browsers',
'b. Use network-based products that examine and scrub browser traffic',
'c. Use free open source filtering tools like OpenDNS',
'd. None of the above'
],
answer : 2,
score : 1,
expandedAnswer : '',
moreInfo : 'Web security Michael Cobb explains what enterprises can do to defend against today\'s range of malicious websites.'
},
{
text : 'Fill in the blank: Attackers looking to spread malware are moving away from IRC in favor of HTTP because __________ .',
img : 'http://media.techtarget.com/WhatIs/images/spacer.gif',
responses : [
'a. it\'s relatively difficult for organizations to spot outbound IRC traffic',
'b. IRC isn\'t capable of transmitting complex malware instructions',
'c. HTTP enables attackers to use a single server to distribute malware',
'd. detecting malicious HTTP traffic is much more challenging'
],
answer : 3,
score : 1,
expandedAnswer : '',
moreInfo : 'How challenging? Learn about a new attack technique called fast-flux.'
}
]
};