CompTIA Security+ (SY0-501) — Question 765

A security administrator found the following piece of code referenced on a domain controller's task scheduler:
$var = GetDomainAdmins
If $var != `˜fabio'

SetDomainAdmins = NULL -
With which of the following types of malware is the code associated?

Answer options

• A. RAT
• B. Backdoor
• C. Logic bomb
• D. Crypto-malware

Correct answer: C

Explanation

The code is indicative of a logic bomb because it executes a specific action (setting DomainAdmins to NULL) based on a certain condition not being met (the variable not being 'fabio'). The other options, such as RAT and backdoor, refer to different types of malware that do not typically involve conditional execution based on specific triggers.