SY0-501 · Question #260
Malware that changes its binary pattern on specific dates at specific times to avoid detection is known as a (n):
The correct answer is C. polymorphic virus. Malware that alters its binary pattern periodically to evade detection by security software is known as a polymorphic virus.
Question
Malware that changes its binary pattern on specific dates at specific times to avoid detection is known as a (n):
Options
- Aarmored virus
- Blogic bomb
- Cpolymorphic virus
- DTrojan
How the community answered
(29 responses)- A10% (3)
- B3% (1)
- C83% (24)
- D3% (1)
Why each option
Malware that alters its binary pattern periodically to evade detection by security software is known as a polymorphic virus.
An armored virus employs techniques like encryption and anti-debugging to make its analysis and reverse engineering difficult, rather than primarily changing its binary pattern to avoid signature-based detection.
A logic bomb is a malicious code segment designed to execute a specific payload only when certain predefined conditions are met, such as a specific date, time, or user action, and it does not inherently change its own binary pattern to evade detection.
A polymorphic virus is a sophisticated type of malware that has the ability to change its identifiable binary signature and encryption routine with each new infection or execution. This constant transformation of its code helps it avoid detection by signature-based antivirus programs, which rely on matching known malware patterns, forcing security software to constantly update its definitions.
A Trojan horse is malware disguised as legitimate software to trick users into installing it, thereby gaining unauthorized access to a system, but its primary characteristic is deception at installation, not the autonomous alteration of its binary pattern over time.
Concept tested: Polymorphic malware evasion techniques
Source: https://www.microsoft.com/en-us/security/blog/2023/04/27/what-is-malware-types-of-malware-and-how-to-prevent-it/
Topics
Community Discussion
No community discussion yet for this question.