A) It encrypts the entire host file to prevent unauthorized access. B) It modifies the last modified date of the host file to match the original. C) It deletes system processes to avoid detection. D) It overwrites unused areas of executable files to infect them without increasing their size.
A) The W32/Simile virus B) The Conficker virus C) The CIH virus D) The polymorphic engine virus
A) Automatically rebooting the system to trigger encryption. B) Increasing the file size to hide malicious code within gaps. C) Hiding the virus by preventing it from appearing on the system process list. D) Encrypting the virus code to bypass signature scanning.
A) Because antivirus software is incapable of deleting files. B) Because viruses automatically reinstall themselves through the internet. C) Because once an infection occurs, the integrity of the system cannot be guaranteed. D) Because Windows files are too large to be scanned.
A) By intercepting the request and returning an uninfected version of the file. B) By deleting the antivirus software before it starts. C) By changing the system time to expire the antivirus license. D) By encrypting the entire NTFS file system.
A) Booting from a medium known to be clear. B) Updating the operating system to the latest version. C) Using a faster processor for scanning. D) Disabling all read requests to the hard drive.
A) Manual file inspection by users B) Hardware keyloggers C) Virus signatures D) Deleting all executable files
A) By renaming the file extension. B) By deleting the decryption module. C) By encoding the body of the virus so the scanner cannot see it directly. D) By using polymorphic engines exclusively.
A) They are always larger in file size. B) The decryption module itself is modified on each infection. C) They do not use encryption. D) They only infect non-executable files.
A) To encrypt files for ransom purposes. B) To hide the virus in the system registry. C) To speed up the system's boot time. D) To rewrite the virus code completely each time it infects a new executable.
A) Because it resides entirely in the system memory. B) Because it consists of over 14,000 lines of code. C) Because it is entirely written in a high-level language. D) Because it uses a simple XOR operation for decryption.
A) It reduces the CPU usage of the virus. B) It makes obtaining representative samples for researchers more difficult. C) It allows the virus to spread faster across networks. D) It prevents the virus from being deleted by the user.
A) By searching for a single static signature. B) By using an emulator or statistical pattern analysis. C) By checking the file creation date. D) By ignoring the decryption module entirely.
A) To bypass the NTFS file system. B) To prevent the virus from self-replicating. C) To avoid detection by users. D) To speed up file system access.
A) The operating system crashes immediately. B) The System File Checker may incorrectly report altered files as authentic. C) The virus is automatically deleted. D) The virus becomes visible to the user.
A) Resident module B) Logic bomb C) Propagation unit D) Infection vector
A) Executing malicious activity B) Scanning the hard drive C) Determining the activation time D) Replicating the virus code
A) Five B) Two C) Three D) Four
A) Propagation phase B) Triggering phase C) Execution phase D) Dormant phase
A) Triggering phase B) Execution phase C) Dormant phase D) Propagation phase
A) The CPU cache B) The BIOS chip C) External storage devices only D) RAM
A) System binary files B) RAM address space C) Microsoft Word macros D) Master Boot Record
A) Email attachments B) Downloading web pages C) System updates D) Physical media
A) Microsoft Outlook B) Microsoft Excel C) Microsoft Paint D) Microsoft Notepad
A) Infection mechanism B) Propagation module C) Trigger D) Execution handler
A) Yes B) No C) Only macro viruses D) Only boot sector viruses
A) A worm is always less dangerous than a virus. B) A worm does not require a host program. C) A worm cannot replicate itself. D) A virus is an independent program.
A) John von Neumann B) Richard Skrenta C) Fred Cohen D) Bob Thomas
A) Creeper B) Elk Cloner C) Brain D) WinVir
A) Leonard Adleman B) Jürgen Kraus C) John von Neumann D) Fred Cohen
A) Elk Cloner B) SCA virus C) WinVir D) (c)Brain
A) WinVir B) Win32.Cabanas C) Bizatch D) Creeper
A) Via the internet. B) Via network cable. C) Via floppy disk. D) Via email attachments.
A) Personal amusement only. B) Seeking profit. C) Improving system performance. D) Testing antivirus software.
A) 1949 B) 1981 C) 1971 D) 1986
A) Apple DOS 3.3 B) TENEX C) Windows 95 D) MS-DOS
A) WinVir B) Creeper C) Bizatch D) Win32.Cabanas |