nerdexam
EC-Council

312-50V10 · Question #38

Which of the following program infects the system boot sector and the executable files at the same time?

The correct answer is D. Multipartite Virus. A multipartite virus is unique in that it simultaneously infects both the boot sector and executable files, giving it multiple infection vectors on the same system.

Malware Threats

Question

Which of the following program infects the system boot sector and the executable files at the same time?

Options

  • AStealth virus
  • BPolymorphic virus
  • CMacro virus
  • DMultipartite Virus

How the community answered

(34 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    94% (32)

Why each option

A multipartite virus is unique in that it simultaneously infects both the boot sector and executable files, giving it multiple infection vectors on the same system.

AStealth virus

A stealth virus uses rootkit-like techniques to intercept OS calls and hide its presence from antivirus scanners, but does not specifically define a dual boot sector and file infection strategy.

BPolymorphic virus

A polymorphic virus mutates its own code or encryption routine with each replication to evade signature-based detection, which is an evasion technique independent of what it infects.

CMacro virus

A macro virus embeds itself in document macros (e.g., Microsoft Office files) and executes when the document is opened - it does not infect boot sectors.

DMultipartite VirusCorrect

Multipartite viruses use a hybrid infection strategy - they infect the master boot record or volume boot record (activating at system startup before the OS loads) and also attach themselves to executable files (activating when infected programs are run). This dual-infection mechanism makes them more persistent and harder to remove because cleaning only one infection vector leaves the system reinfected from the other.

Concept tested: Multipartite virus dual-infection mechanism

Source: https://www.cisa.gov/sites/default/files/publications/Understanding-Malware_S508C.pdf

Topics

#multipartite virus#boot sector#executable infection#malware types

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice