nerdexam
GIAC

GCIH · Question #9

Which of the following statements are true about a keylogger? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. It records all keystrokes on the victim's computer in a predefined log file. B. It can be remotely installed on a computer system. C. It is a software tool used to trace all or specific activities of a user on a computer. A keylogger records keystrokes, can be remotely installed, and monitors user activity - but does not destroy or scramble data on the hard disk.

Malware Analysis & Advanced Persistent Threats

Question

Which of the following statements are true about a keylogger? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt records all keystrokes on the victim's computer in a predefined log file.
  • BIt can be remotely installed on a computer system.
  • CIt is a software tool used to trace all or specific activities of a user on a computer.
  • DIt uses hidden code to destroy or scramble data on the hard disk.

How the community answered

(20 responses)
  • A
    95% (19)
  • D
    5% (1)

Why each option

A keylogger records keystrokes, can be remotely installed, and monitors user activity - but does not destroy or scramble data on the hard disk.

AIt records all keystrokes on the victim's computer in a predefined log file.Correct

The core function of a keylogger is to silently capture every keystroke made on a victim's computer and store those recordings in a log file that the attacker can later retrieve. This covert data collection is the defining characteristic of keylogger malware.

BIt can be remotely installed on a computer system.Correct

Keyloggers can be delivered and installed remotely through attack vectors such as phishing emails, trojans, or drive-by downloads, allowing an attacker to deploy them without requiring physical access to the target system.

CIt is a software tool used to trace all or specific activities of a user on a computer.Correct

Keyloggers are classified as spyware because they trace and monitor all or specific user activities - including passwords, messages, and browsing behavior - making them a covert surveillance tool on a compromised machine.

DIt uses hidden code to destroy or scramble data on the hard disk.

Destroying or scrambling data on the hard disk describes destructive malware such as a wiper or logic bomb, not a keylogger, which is designed for silent data collection rather than destruction.

Concept tested: Keylogger malware characteristics and behavior

Source: https://attack.mitre.org/techniques/T1056/001/

Topics

#keylogger#spyware#remote installation#user activity monitoring

Community Discussion

No community discussion yet for this question.

Full GCIH Practice