1. What is Virus ? Junior A. malware that mutates its code on each infection to evade signature detection B. executing suspect files in an isolated environment to observe their behavior safely C. analyzing RAM captures to find running malware, injected code, and artifacts D. malware that attaches to a host file and spreads when that file is executed
2. Which term means: "malware that attaches to a host file and spreads when that file is executed"? Junior A. Virus B. Worm C. Rootkit D. Timeline analysis
3. Which statement is correct? Junior A. Virus — self-replicating malware that spreads across networks without user interaction B. Virus — malware that attaches to a host file and spreads when that file is executed C. Virus — executing suspect files in an isolated environment to observe their behavior safely D. Virus — malware disguised as legitimate software to trick users into running it
4. What is Worm ? Junior A. self-replicating malware that spreads across networks without user interaction B. pattern-matching rules that identify and classify malware by textual or binary signatures C. analyzing RAM captures to find running malware, injected code, and artifacts D. stealthy malware that hides its presence and grants persistent privileged access
5. Which term means: "self-replicating malware that spreads across networks without user interaction"? Junior A. Worm B. Polymorphic malware C. Rootkit D. Sandboxing
6. Which statement is correct? Junior A. Worm — malicious code that runs in memory using legitimate tools, leaving little on disk B. Worm — pattern-matching rules that identify and classify malware by textual or binary signatures C. Worm — executing suspect files in an isolated environment to observe their behavior safely D. Worm — self-replicating malware that spreads across networks without user interaction
7. What is Trojan ? Junior A. malicious code that runs in memory using legitimate tools, leaving little on disk B. malware disguised as legitimate software to trick users into running it C. analyzing RAM captures to find running malware, injected code, and artifacts D. malware or device that records keystrokes to capture credentials and data
8. Which term means: "malware disguised as legitimate software to trick users into running it"? Junior A. YARA rules B. Polymorphic malware C. Trojan D. Worm
9. Which statement is correct? Junior A. Trojan — malicious code that runs in memory using legitimate tools, leaving little on disk B. Trojan — executing suspect files in an isolated environment to observe their behavior safely C. Trojan — malware disguised as legitimate software to trick users into running it D. Trojan — malware or device that records keystrokes to capture credentials and data
10. What is Rootkit ? Junior A. executing suspect files in an isolated environment to observe their behavior safely B. self-replicating malware that spreads across networks without user interaction C. stealthy malware that hides its presence and grants persistent privileged access D. malware that attaches to a host file and spreads when that file is executed
11. Which term means: "stealthy malware that hides its presence and grants persistent privileged access"? Junior A. Sandboxing B. Polymorphic malware C. Keylogger D. Rootkit
12. Which statement is correct? Junior A. Rootkit — stealthy malware that hides its presence and grants persistent privileged access B. Rootkit — self-replicating malware that spreads across networks without user interaction C. Rootkit — analyzing RAM captures to find running malware, injected code, and artifacts D. Rootkit — executing suspect files in an isolated environment to observe their behavior safely
13. What is Keylogger ? Mid A. malware disguised as legitimate software to trick users into running it B. malware or device that records keystrokes to capture credentials and data C. malicious code that runs in memory using legitimate tools, leaving little on disk D. pattern-matching rules that identify and classify malware by textual or binary signatures
14. Which term means: "malware or device that records keystrokes to capture credentials and data"? Mid A. YARA rules B. Memory forensics C. Keylogger D. Fileless malware
15. Which statement is correct? Mid A. Keylogger — malware that attaches to a host file and spreads when that file is executed B. Keylogger — malware or device that records keystrokes to capture credentials and data C. Keylogger — executing suspect files in an isolated environment to observe their behavior safely D. Keylogger — pattern-matching rules that identify and classify malware by textual or binary signatures
16. What is Fileless malware ? Mid A. reconstructing the sequence of events from filesystem and log timestamps during an investigation B. pattern-matching rules that identify and classify malware by textual or binary signatures C. malware that mutates its code on each infection to evade signature detection D. malicious code that runs in memory using legitimate tools, leaving little on disk
17. Which term means: "malicious code that runs in memory using legitimate tools, leaving little on disk"? Mid A. Keylogger B. Disk imaging C. Fileless malware D. Worm
18. Which statement is correct? Mid A. Fileless malware — malware that attaches to a host file and spreads when that file is executed B. Fileless malware — malicious code that runs in memory using legitimate tools, leaving little on disk C. Fileless malware — creating a bit-for-bit forensic copy of storage to preserve evidence integrity D. Fileless malware — malware or device that records keystrokes to capture credentials and data
19. What is Memory forensics ? Mid A. malware that mutates its code on each infection to evade signature detection B. malware that attaches to a host file and spreads when that file is executed C. analyzing RAM captures to find running malware, injected code, and artifacts D. creating a bit-for-bit forensic copy of storage to preserve evidence integrity
20. Which term means: "analyzing RAM captures to find running malware, injected code, and artifacts"? Mid A. Disk imaging B. YARA rules C. Polymorphic malware D. Memory forensics
21. Which statement is correct? Mid A. Memory forensics — analyzing RAM captures to find running malware, injected code, and artifacts B. Memory forensics — malware that mutates its code on each infection to evade signature detection C. Memory forensics — stealthy malware that hides its presence and grants persistent privileged access D. Memory forensics — executing suspect files in an isolated environment to observe their behavior safely
22. What is Sandboxing ? Mid A. reconstructing the sequence of events from filesystem and log timestamps during an investigation B. malware disguised as legitimate software to trick users into running it C. executing suspect files in an isolated environment to observe their behavior safely D. creating a bit-for-bit forensic copy of storage to preserve evidence integrity
23. Which term means: "executing suspect files in an isolated environment to observe their behavior safely"? Mid A. Sandboxing B. Rootkit C. Trojan D. Timeline analysis
24. Which statement is correct? Mid A. Sandboxing — pattern-matching rules that identify and classify malware by textual or binary signatures B. Sandboxing — analyzing RAM captures to find running malware, injected code, and artifacts C. Sandboxing — executing suspect files in an isolated environment to observe their behavior safely D. Sandboxing — malware or device that records keystrokes to capture credentials and data
25. What is Disk imaging ? Senior A. creating a bit-for-bit forensic copy of storage to preserve evidence integrity B. self-replicating malware that spreads across networks without user interaction C. malware or device that records keystrokes to capture credentials and data D. reconstructing the sequence of events from filesystem and log timestamps during an investigation
26. Which term means: "creating a bit-for-bit forensic copy of storage to preserve evidence integrity"? Senior A. Polymorphic malware B. Disk imaging C. Sandboxing D. Timeline analysis
27. Which statement is correct? Senior A. Disk imaging — creating a bit-for-bit forensic copy of storage to preserve evidence integrity B. Disk imaging — executing suspect files in an isolated environment to observe their behavior safely C. Disk imaging — pattern-matching rules that identify and classify malware by textual or binary signatures D. Disk imaging — malicious code that runs in memory using legitimate tools, leaving little on disk
28. What is YARA rules ? Senior A. reconstructing the sequence of events from filesystem and log timestamps during an investigation B. self-replicating malware that spreads across networks without user interaction C. pattern-matching rules that identify and classify malware by textual or binary signatures D. stealthy malware that hides its presence and grants persistent privileged access
29. Which term means: "pattern-matching rules that identify and classify malware by textual or binary signatures"? Senior A. YARA rules B. Disk imaging C. Timeline analysis D. Fileless malware
30. Which statement is correct? Senior A. YARA rules — malware that attaches to a host file and spreads when that file is executed B. YARA rules — pattern-matching rules that identify and classify malware by textual or binary signatures C. YARA rules — malware disguised as legitimate software to trick users into running it D. YARA rules — malware or device that records keystrokes to capture credentials and data Showing 30 of 54 Malware & Forensics questions — the full set, with answers, explanations and an AI tutor on every question, is inside.