nerdexam
GIAC

GCFA · Question #309

Which of the following types of virus makes changes to a file system of a disk?

The correct answer is C. Cluster virus. A cluster virus modifies the file system's directory entries or file allocation table to redirect program execution to the virus code, leaving actual files untouched.

Threat Hunting & Timeline Analysis

Question

Which of the following types of virus makes changes to a file system of a disk?

Options

  • AMaster boot record virus
  • BStealth virus
  • CCluster virus
  • DMacro virus

How the community answered

(60 responses)
  • A
    7% (4)
  • B
    13% (8)
  • C
    77% (46)
  • D
    3% (2)

Why each option

A cluster virus modifies the file system's directory entries or file allocation table to redirect program execution to the virus code, leaving actual files untouched.

AMaster boot record virus

A master boot record virus infects the MBR sector to gain control at boot time, not the file system's directory or allocation table structures.

BStealth virus

A stealth virus intercepts operating system calls to conceal its presence from scanners, and is defined by its evasion behavior rather than file system modification.

CCluster virusCorrect

A cluster virus operates by altering directory entries or FAT pointers on disk so that executing any program causes the virus to run first. It targets the file system structure itself rather than directly modifying executable files, making every program access trigger the infection.

DMacro virus

A macro virus embeds malicious code within document macros in files like Word or Excel documents, not within the disk's file system structure.

Concept tested: Cluster virus file system directory modification mechanism

Topics

#cluster virus#file system modification#virus types#malware classification

Community Discussion

No community discussion yet for this question.

Full GCFA Practice