nerdexam
GIAC

GCIH · Question #121

Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?

The correct answer is C. Hardware keylogger. Hardware keyloggers are physical devices plugged between the keyboard connector and the USB/PS2 port, or embedded inside the keyboard itself. Because they operate entirely at the hardware level with no software footprint on the host system, anti-virus and anti-spyware tools…

Malware Analysis & Advanced Persistent Threats

Question

Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?

Options

  • AKernel keylogger
  • BSoftware keylogger
  • CHardware keylogger
  • DOS keylogger

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    88% (29)
  • D
    3% (1)

Explanation

Hardware keyloggers are physical devices plugged between the keyboard connector and the USB/PS2 port, or embedded inside the keyboard itself. Because they operate entirely at the hardware level with no software footprint on the host system, anti-virus and anti-spyware tools - which scan processes, memory, and files - have no visibility into them. Kernel, software, and OS keyloggers all run as code within the operating environment, making them susceptible to detection by security software through behavioral analysis, signature matching, or system call monitoring.

Topics

#keylogger#hardware keylogger#AV evasion#endpoint detection

Community Discussion

No community discussion yet for this question.

Full GCIH Practice