nerdexam
GIAC

GSLC · Question #149

The MBR of a hard disk is a collection of boot records that contain disk information such as disk architecture, cluster size, and so on. The main work of the MBR is to locate and run necessary…

The correct answer is B. Multipartite C. Boot sector. Boot sector and multipartite viruses are capable of infecting the Master Boot Record (MBR) of a hard disk. Understanding which virus types target the MBR is a key malware classification concept.

Security Architecture & Engineering

Question

The MBR of a hard disk is a collection of boot records that contain disk information such as disk architecture, cluster size, and so on. The main work of the MBR is to locate and run necessary operating system files that are required to run a hard disk. In the context of the operating system, MBR is also known as the boot loader. Which of the following viruses can infect the MBR of a hard disk? Each correct answer represents a complete solution. Choose two.

Options

  • AStealth
  • BMultipartite
  • CBoot sector
  • DFile

How the community answered

(70 responses)
  • A
    9% (6)
  • B
    87% (61)
  • D
    4% (3)

Why each option

Boot sector and multipartite viruses are capable of infecting the Master Boot Record (MBR) of a hard disk. Understanding which virus types target the MBR is a key malware classification concept.

AStealth

Stealth viruses use techniques to hide their presence from antivirus tools (such as intercepting system calls), but stealth is a behavioral characteristic, not a classification that defines MBR infection capability.

BMultipartiteCorrect

Multipartite viruses are hybrid threats that infect both the boot sector/MBR and executable files simultaneously, making them capable of MBR infection as part of their multi-vector attack strategy.

CBoot sectorCorrect

Boot sector viruses directly target the MBR or volume boot record, overwriting or appending malicious code to the sector that is executed first during system startup, which is precisely the MBR's role.

DFile

File viruses infect executable files (such as .exe or .com files) by attaching their code to those files, and they do not target the MBR or boot sectors.

Concept tested: MBR-infecting virus types classification

Source: https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/malware-naming

Topics

#MBR infection#boot sector virus#multipartite virus#malware types

Community Discussion

No community discussion yet for this question.

Full GSLC Practice