Chapter 42 · Quiz

Spyware and Bloatware Quiz

Seven questions covering spyware goals, delivery vectors, affiliate fraud, bloatware risks, and removal methods.

Q1. A user notices they are seeing targeted advertisements for products related to searches they conducted in private/incognito browsing mode. Antivirus returns clean. Which of the following BEST explains this behavior?

A. The browser's private mode is not functioning correctly and is sharing data with the browser vendor B. Spyware with browser-monitoring capability is intercepting browsing activity at the OS level, outside the browser's private mode C. The antivirus software is sharing browsing data with advertising networks as part of its telemetry D. The search engine is using cookies to track searches despite private mode being enabled

Q2. Which spyware component is MOST directly responsible for capturing a user's banking username and password when they log into their bank's website?

A. Browser monitor B. Keylogger C. Affiliate injector D. Adware module

Q3. A user's spyware infection includes a component that injects code into e-commerce browsing sessions. When the user makes a purchase at a legitimate online retailer, the attacker's account receives a referral payment from the retailer. The user pays the normal price and receives the product. Which spyware behavior does this describe?

A. Identity theft B. Browser hijacking C. Affiliate fraud D. Credential harvesting

Q4. A user receives a pop-up on a website they are visiting. The pop-up uses official-looking graphics and states: "Warning: Your computer is infected with 12 viruses. Click here to download a free scan and remove them immediately." The user has not visited any malicious sites and their computer is functioning normally. Which of the following BEST describes this situation?

A. A legitimate security warning from the operating system that should be acted on immediately B. A notification from the user's installed antivirus that has detected real infections C. Scareware — a fake security alert designed to trick the user into installing spyware disguised as a security tool D. A browser compatibility warning that can be safely dismissed without concern

Q5. From a security perspective, what is the PRIMARY concern with bloatware pre-installed on a new device?

A. Bloatware makes the computer run slowly, which reduces employee productivity B. Bloatware takes up storage space that could be used for the user's files C. Bloatware expands the attack surface with potentially unpatched software that introduces security vulnerabilities from day one D. Bloatware requires the user to agree to additional license agreements

Q6. A technician is attempting to remove bloatware from a new laptop. The program does not appear in the operating system's installed applications list and has no dedicated uninstaller. What should the technician try NEXT?

A. Reinstall the operating system — this is the only way to remove software not listed in Apps B. Check the application's program folder and Start menu entry for a dedicated uninstaller executable C. Leave the program installed — if it doesn't appear in the uninstall list, it cannot be removed safely D. Contact the manufacturer — only they can remove pre-installed software

Q7. Match each spyware/bloatware concept to its correct description.

Click each term on the left, then click its match on the right.

Match each item on the left with its correct description on the right:

Affiliate Fraud

Scareware

Bundled Software

Malwarebytes

A. Spyware included alongside a legitimate application during installation, disclosed only in fine-print license agreements or pre-checked checkboxes

B. Dedicated anti-malware scanner that detects spyware, adware, and PUPs that standard antivirus may miss

C. Spyware injects attacker's referral code into online purchases; attacker earns commission while victim pays normal price

D. Fake security alert claiming the computer is infected; urges installation of a "scanner" that is itself spyware

Click an item on the left to select it, then click its match on the right.