nerdexam
IISFA

II0-001 · Question #202

The following methods will detect or defeat hardware keylogging except:

The correct answer is A. Virus scanner. A virus scanner operates purely in software, scanning files and processes in memory - it has no mechanism to detect a physical device plugged into a port between the keyboard and the computer, which is exactly what a hardware keylogger is. Why the distractors are wrong (i.e…

Question

The following methods will detect or defeat hardware keylogging except:

Options

  • AVirus scanner
  • BPhysical inspection
  • CMonitoring file writes
  • DSniffer

How the community answered

(40 responses)
  • A
    70% (28)
  • B
    5% (2)
  • C
    18% (7)
  • D
    8% (3)

Explanation

A virus scanner operates purely in software, scanning files and processes in memory - it has no mechanism to detect a physical device plugged into a port between the keyboard and the computer, which is exactly what a hardware keylogger is.

Why the distractors are wrong (i.e., they DO work against hardware keyloggers):

  • B. Physical inspection works because hardware keyloggers are tangible devices - a visual check of ports and cables can reveal an unfamiliar dongle or inline device.
  • C. Monitoring file writes can catch hardware keyloggers that store captured keystrokes to internal flash memory or write logs to a connected drive.
  • D. Sniffer can detect wireless hardware keyloggers (e.g., RF or Wi-Fi enabled) that transmit captured keystrokes over a network.

Memory tip: The key word is hardware - anything that defeats a hardware keylogger must engage with the physical or network layer. A virus scanner lives entirely in software and is blind to physical hardware, making it the odd one out. If you see "hardware threat + software-only tool," that tool won't work.

Community Discussion

No community discussion yet for this question.

Full II0-001 Practice