II0-001 · Question #202
The following methods will detect or defeat hardware keylogging except:
The correct answer is A. Virus scanner. A virus scanner operates purely in software, scanning files and processes in memory - it has no mechanism to detect a physical device plugged into a port between the keyboard and the computer, which is exactly what a hardware keylogger is. Why the distractors are wrong (i.e…
Question
The following methods will detect or defeat hardware keylogging except:
Options
- AVirus scanner
- BPhysical inspection
- CMonitoring file writes
- DSniffer
How the community answered
(40 responses)- A70% (28)
- B5% (2)
- C18% (7)
- D8% (3)
Explanation
A virus scanner operates purely in software, scanning files and processes in memory - it has no mechanism to detect a physical device plugged into a port between the keyboard and the computer, which is exactly what a hardware keylogger is.
Why the distractors are wrong (i.e., they DO work against hardware keyloggers):
- B. Physical inspection works because hardware keyloggers are tangible devices - a visual check of ports and cables can reveal an unfamiliar dongle or inline device.
- C. Monitoring file writes can catch hardware keyloggers that store captured keystrokes to internal flash memory or write logs to a connected drive.
- D. Sniffer can detect wireless hardware keyloggers (e.g., RF or Wi-Fi enabled) that transmit captured keystrokes over a network.
Memory tip: The key word is hardware - anything that defeats a hardware keylogger must engage with the physical or network layer. A virus scanner lives entirely in software and is blind to physical hardware, making it the odd one out. If you see "hardware threat + software-only tool," that tool won't work.
Community Discussion
No community discussion yet for this question.