ibps-so 2016 · Question 30 of 394

Three customers of one branch of Chandrabhaga Urban Bank complained within a fortnight that money had gone out of their internet-banking accounts although they had never disclosed a password to anybody. All three had used the same machine at a cyber cafe near the branch. When the machine was examined, a small program was found running unannounced, with no window and no entry in the task bar, which recorded every key pressed at that machine into a hidden le and posted the le to an address abroad every few hours. The passwords had not been guessed, intercepted upon the wire or broken by computation; they had been read as they were typed. Software of that description is a key logger, which is correctly de ned as:

1. AA program that encrypts the les of the victim and demands a payment before the key to decipher them is supplied
2. BA program or hardware device that covertly records the keystrokes made at a machine, so that whatever is typed — including passwords typed into an encrypted session — may afterwards be read by the attackerCorrect
3. CA device placed upon a network segment that captures and stores every frame passing upon that segment for later analysis
4. DA program that replicates itself across a network without attaching itself to any host program and without any action by a user
5. EA hardware token that generates a fresh one-time password every thirty seconds for the customer to key in