GCIH · Question #9
Which of the following statements are true about a keylogger? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. It records all keystrokes on the victim's computer in a predefined log file. B. It can be remotely installed on a computer system. C. It is a software tool used to trace all or specific activities of a user on a computer. A keylogger records keystrokes, can be remotely installed, and monitors user activity - but does not destroy or scramble data on the hard disk.
Question
Which of the following statements are true about a keylogger? Each correct answer represents a complete solution. Choose all that apply.
Options
- AIt records all keystrokes on the victim's computer in a predefined log file.
- BIt can be remotely installed on a computer system.
- CIt is a software tool used to trace all or specific activities of a user on a computer.
- DIt uses hidden code to destroy or scramble data on the hard disk.
How the community answered
(20 responses)- A95% (19)
- D5% (1)
Why each option
A keylogger records keystrokes, can be remotely installed, and monitors user activity - but does not destroy or scramble data on the hard disk.
The core function of a keylogger is to silently capture every keystroke made on a victim's computer and store those recordings in a log file that the attacker can later retrieve. This covert data collection is the defining characteristic of keylogger malware.
Keyloggers can be delivered and installed remotely through attack vectors such as phishing emails, trojans, or drive-by downloads, allowing an attacker to deploy them without requiring physical access to the target system.
Keyloggers are classified as spyware because they trace and monitor all or specific user activities - including passwords, messages, and browsing behavior - making them a covert surveillance tool on a compromised machine.
Destroying or scrambling data on the hard disk describes destructive malware such as a wiper or logic bomb, not a keylogger, which is designed for silent data collection rather than destruction.
Concept tested: Keylogger malware characteristics and behavior
Source: https://attack.mitre.org/techniques/T1056/001/
Topics
Community Discussion
No community discussion yet for this question.