Which attack defines a piece of code that is inserted into software to trigger a malicious function?
Correct Answer: D
A logic bomb is a piece of code that is inserted into software to trigger a malicious function when a certain condition is met, such as a specific date, time, or event. A logic bomb can cause various types of damage, such as deleting or encrypting data, crashing the system, or launching other attacks. A logic bomb is often hidden or disguised within legitimate software, making it difficult to detect or prevent. A logic bomb is different from phishing, salami, or back door attacks, which are defined as follows:
* Phishing is a type of social engineering attack that uses fraudulent emails or websites to trick users into revealing their personal or financial information, or installing malware on their devices.
* Salami is a type of fraud that involves stealing small amounts of money or data from multiple sources over time, hoping that the theft will go unnoticed or be ignored.
* Back door is a type of covert access that bypasses the normal authentication or authorization mechanisms of a system or network, allowing unauthorized users or attackers to gain access or control.
References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 7: Malicious Code and Application Attacks, page 417; CISSP Official (ISC)2 Practice Tests, Third Edition, Domain 3: Security Architecture and Engineering, Question 3.15, page 158.