312-50V10 · Question #38
Which of the following program infects the system boot sector and the executable files at the same time?
The correct answer is D. Multipartite Virus. A multipartite virus is unique in that it simultaneously infects both the boot sector and executable files, giving it multiple infection vectors on the same system.
Question
Which of the following program infects the system boot sector and the executable files at the same time?
Options
- AStealth virus
- BPolymorphic virus
- CMacro virus
- DMultipartite Virus
How the community answered
(34 responses)- A3% (1)
- C3% (1)
- D94% (32)
Why each option
A multipartite virus is unique in that it simultaneously infects both the boot sector and executable files, giving it multiple infection vectors on the same system.
A stealth virus uses rootkit-like techniques to intercept OS calls and hide its presence from antivirus scanners, but does not specifically define a dual boot sector and file infection strategy.
A polymorphic virus mutates its own code or encryption routine with each replication to evade signature-based detection, which is an evasion technique independent of what it infects.
A macro virus embeds itself in document macros (e.g., Microsoft Office files) and executes when the document is opened - it does not infect boot sectors.
Multipartite viruses use a hybrid infection strategy - they infect the master boot record or volume boot record (activating at system startup before the OS loads) and also attach themselves to executable files (activating when infected programs are run). This dual-infection mechanism makes them more persistent and harder to remove because cleaning only one infection vector leaves the system reinfected from the other.
Concept tested: Multipartite virus dual-infection mechanism
Source: https://www.cisa.gov/sites/default/files/publications/Understanding-Malware_S508C.pdf
Topics
Community Discussion
No community discussion yet for this question.