nerdexam
EC-Council

312-50V11 · Question #310

Which of the following items of a computer system will an anti-virus program scan for viruses?

The correct answer is A. Boot Sector. Anti-virus programs scan the boot sector because it is a primary target for boot viruses that load before the OS, making early detection critical.

Malware Threats

Question

Which of the following items of a computer system will an anti-virus program scan for viruses?

Options

  • ABoot Sector
  • BDeleted Files
  • CWindows Process List
  • DPassword Protected Files

How the community answered

(37 responses)
  • A
    89% (33)
  • B
    5% (2)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Anti-virus programs scan the boot sector because it is a primary target for boot viruses that load before the OS, making early detection critical.

ABoot SectorCorrect

The boot sector (MBR and Volume Boot Record) is executed by the BIOS/UEFI before the operating system loads, making it a high-value target for persistent malware. Anti-virus scanners specifically examine the boot sector to detect boot viruses and rootkits that embed themselves there to achieve pre-OS execution and persistence.

BDeleted Files

Deleted files are not reliably accessible to an AV scanner because their data may be overwritten; they are not a primary scan target in standard AV operation.

CWindows Process List

While some security tools monitor the Windows process list for behavioral anomalies, this is runtime monitoring, not a file-based virus scan.

DPassword Protected Files

Password-protected files cannot be decrypted or fully inspected by an AV program without the password, so they are typically excluded from standard virus scans.

Concept tested: Anti-virus boot sector scanning for persistent malware

Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows

Topics

#antivirus#boot sector#virus scanning#malware detection

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice