nerdexam
GIAC

GREM · Question #85

The use of which API function might indicate that malware is attempting to modify system-level settings or interfere with system processes?

The correct answer is B. DeviceIoControl. See the full explanation below for the reasoning.

Question

The use of which API function might indicate that malware is attempting to modify system-level settings or interfere with system processes?

Options

  • ASendMessage
  • BDeviceIoControl
  • CGetModuleHandle
  • DExitProcess

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    75% (40)
  • C
    15% (8)
  • D
    4% (2)

Community Discussion

No community discussion yet for this question.

Full GREM Practice