nerdexam
GIAC

GREM · Question #43

Which Windows API function is commonly used by malware to hide its presence from task managers and system monitors?

The correct answer is A. RegisterServiceProcess. See the full explanation below for the reasoning.

Question

Which Windows API function is commonly used by malware to hide its presence from task managers and system monitors?

Options

  • ARegisterServiceProcess
  • BTerminateProcess
  • CIsDebuggerPresent
  • DVirtualProtect

How the community answered

(42 responses)
  • A
    71% (30)
  • B
    5% (2)
  • C
    7% (3)
  • D
    17% (7)

Community Discussion

No community discussion yet for this question.

Full GREM Practice