312-50V11 · Question #38
Which of the following program infects the system boot sector and the executable files at the same time?
The correct answer is D. Multipartite Virus. A multipartite virus is the specific virus category that simultaneously targets both the boot sector and executable files, giving it multiple infection vectors within the same host system.
Question
Which of the following program infects the system boot sector and the executable files at the same time?
Options
- AStealth virus
- BPolymorphic virus
- CMacro virus
- DMultipartite Virus
How the community answered
(46 responses)- A2% (1)
- B7% (3)
- C2% (1)
- D89% (41)
Why each option
A multipartite virus is the specific virus category that simultaneously targets both the boot sector and executable files, giving it multiple infection vectors within the same host system.
A stealth virus intercepts OS calls to hide its presence from antivirus tools but does not specifically target both the boot sector and executable files simultaneously.
A polymorphic virus mutates its own code with each replication to evade signature-based detection, which is a self-obfuscation technique unrelated to targeting multiple system components.
A macro virus embeds malicious macros inside document files such as Word or Excel and relies on the host application's macro engine to execute - it does not infect boot sectors.
A multipartite virus uses more than one infection mechanism - it infects the master boot record (MBR) or volume boot record to activate at system startup, and also appends to or overwrites executable files to spread via program execution. This dual-vector approach makes it harder to remove because cleaning only the boot sector or only the executables leaves the other infection path active and capable of re-infection.
Concept tested: Multipartite virus dual-infection of boot sector and executables
Source: https://www.cisa.gov/sites/default/files/publications/understanding-hidden-threats-rootkits-and-botnets_0.pdf
Topics
Community Discussion
No community discussion yet for this question.