Which option is an important characteristic or capability of advanced malware?

Question

Options

• Adistributed, fault-tolerant architecture
• Bfile-less malware
• Chiding techniques such as polymorphism, metamorphism, and obfuscation
• Dall of the above

• A
  2% (1)
• B
  2% (1)
• C
  2% (1)
• D
  93% (43)

Explanation

Option D is correct because all three characteristics - distributed/fault-tolerant architecture, file-less execution, and evasion techniques - are well-documented capabilities found in advanced malware (also called APTs or sophisticated threats). These aren't mutually exclusive; modern malware often combines all three to maximize resilience, stealth, and survivability.

There are no "distractors" here - A, B, and C are each genuinely valid on their own. Option A describes botnets and C2 infrastructure that survive takedowns. Option B describes malware that lives in memory or abuses legitimate tools (like PowerShell), leaving no files on disk to detect. Option C describes techniques that mutate code (polymorphism/metamorphism) or hide intent (obfuscation) to evade signature-based detection.

Memory tip: Think "advanced malware is advanced for a reason" - it attacks from multiple angles at once (distributed), hides its tracks (file-less), and disguises itself (evasion). When an exam lists several real capabilities and offers "all of the above," that's a strong signal - especially if you can confirm each option independently.

No community discussion yet for this question.