312-49 · Question #351
You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your…
The correct answer is D. Metamorphic. A metamorphic virus completely rewrites its own code with each infection cycle - the entire binary changes, including the engine itself - while preserving the original functionality. This makes signature-based antivirus detection extremely difficult since no two instances share…
Question
You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?
Options
- AOligomorhic
- BTransmorphic
- CPolymorphic
- DMetamorphic
How the community answered
(45 responses)- A4% (2)
- B7% (3)
- C2% (1)
- D87% (39)
Explanation
A metamorphic virus completely rewrites its own code with each infection cycle - the entire binary changes, including the engine itself - while preserving the original functionality. This makes signature-based antivirus detection extremely difficult since no two instances share the same byte sequence. This is distinct from a polymorphic virus (C), which encrypts its payload but retains a consistent (detectable) decryption stub. Oligomorphic (A) viruses have a small, finite set of mutation variants. 'Transmorphic' (B) is not a standard classification.
Topics
Community Discussion
No community discussion yet for this question.