54 Malware & Forensics questions from the Security bank, written for Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd.
Free to start: the 2-minute IT readiness check — six questions and a result.
A.malware that mutates its code on each infection to evade signature detection
B.executing suspect files in an isolated environment to observe their behavior safely
C.analyzing RAM captures to find running malware, injected code, and artifacts
D.malware that attaches to a host file and spreads when that file is executed
Answer + AI explanation with Pro
2. Which term means: "malware that attaches to a host file and spreads when that file is executed"?
Junior
A.Virus
B.Worm
C.Rootkit
D.Timeline analysis
Answer + AI explanation with Pro
3. Which statement is correct?
Junior
A.Virus — self-replicating malware that spreads across networks without user interaction
B.Virus — malware that attaches to a host file and spreads when that file is executed
C.Virus — executing suspect files in an isolated environment to observe their behavior safely
D.Virus — malware disguised as legitimate software to trick users into running it
Answer + AI explanation with Pro
4. What is Worm?
Junior
A.self-replicating malware that spreads across networks without user interaction
B.pattern-matching rules that identify and classify malware by textual or binary signatures
C.analyzing RAM captures to find running malware, injected code, and artifacts
D.stealthy malware that hides its presence and grants persistent privileged access
Answer + AI explanation with Pro
5. Which term means: "self-replicating malware that spreads across networks without user interaction"?
Junior
A.Worm
B.Polymorphic malware
C.Rootkit
D.Sandboxing
Answer + AI explanation with Pro
6. Which statement is correct?
Junior
A.Worm — malicious code that runs in memory using legitimate tools, leaving little on disk
B.Worm — pattern-matching rules that identify and classify malware by textual or binary signatures
C.Worm — executing suspect files in an isolated environment to observe their behavior safely
D.Worm — self-replicating malware that spreads across networks without user interaction
Answer + AI explanation with Pro
7. What is Trojan?
Junior
A.malicious code that runs in memory using legitimate tools, leaving little on disk
B.malware disguised as legitimate software to trick users into running it
C.analyzing RAM captures to find running malware, injected code, and artifacts
D.malware or device that records keystrokes to capture credentials and data
Answer + AI explanation with Pro
8. Which term means: "malware disguised as legitimate software to trick users into running it"?
Junior
A.YARA rules
B.Polymorphic malware
C.Trojan
D.Worm
Answer + AI explanation with Pro
9. Which statement is correct?
Junior
A.Trojan — malicious code that runs in memory using legitimate tools, leaving little on disk
B.Trojan — executing suspect files in an isolated environment to observe their behavior safely
C.Trojan — malware disguised as legitimate software to trick users into running it
D.Trojan — malware or device that records keystrokes to capture credentials and data
Answer + AI explanation with Pro
10. What is Rootkit?
Junior
A.executing suspect files in an isolated environment to observe their behavior safely
B.self-replicating malware that spreads across networks without user interaction
C.stealthy malware that hides its presence and grants persistent privileged access
D.malware that attaches to a host file and spreads when that file is executed
Answer + AI explanation with Pro
11. Which term means: "stealthy malware that hides its presence and grants persistent privileged access"?
Junior
A.Sandboxing
B.Polymorphic malware
C.Keylogger
D.Rootkit
Answer + AI explanation with Pro
12. Which statement is correct?
Junior
A.Rootkit — stealthy malware that hides its presence and grants persistent privileged access
B.Rootkit — self-replicating malware that spreads across networks without user interaction
C.Rootkit — analyzing RAM captures to find running malware, injected code, and artifacts
D.Rootkit — executing suspect files in an isolated environment to observe their behavior safely
Answer + AI explanation with Pro
13. What is Keylogger?
Mid
A.malware disguised as legitimate software to trick users into running it
B.malware or device that records keystrokes to capture credentials and data
C.malicious code that runs in memory using legitimate tools, leaving little on disk
D.pattern-matching rules that identify and classify malware by textual or binary signatures
Answer + AI explanation with Pro
14. Which term means: "malware or device that records keystrokes to capture credentials and data"?
Mid
A.YARA rules
B.Memory forensics
C.Keylogger
D.Fileless malware
Answer + AI explanation with Pro
15. Which statement is correct?
Mid
A.Keylogger — malware that attaches to a host file and spreads when that file is executed
B.Keylogger — malware or device that records keystrokes to capture credentials and data
C.Keylogger — executing suspect files in an isolated environment to observe their behavior safely
D.Keylogger — pattern-matching rules that identify and classify malware by textual or binary signatures
Answer + AI explanation with Pro
16. What is Fileless malware?
Mid
A.reconstructing the sequence of events from filesystem and log timestamps during an investigation
B.pattern-matching rules that identify and classify malware by textual or binary signatures
C.malware that mutates its code on each infection to evade signature detection
D.malicious code that runs in memory using legitimate tools, leaving little on disk
Answer + AI explanation with Pro
17. Which term means: "malicious code that runs in memory using legitimate tools, leaving little on disk"?
Mid
A.Keylogger
B.Disk imaging
C.Fileless malware
D.Worm
Answer + AI explanation with Pro
18. Which statement is correct?
Mid
A.Fileless malware — malware that attaches to a host file and spreads when that file is executed
B.Fileless malware — malicious code that runs in memory using legitimate tools, leaving little on disk
C.Fileless malware — creating a bit-for-bit forensic copy of storage to preserve evidence integrity
D.Fileless malware — malware or device that records keystrokes to capture credentials and data
Answer + AI explanation with Pro
19. What is Memory forensics?
Mid
A.malware that mutates its code on each infection to evade signature detection
B.malware that attaches to a host file and spreads when that file is executed
C.analyzing RAM captures to find running malware, injected code, and artifacts
D.creating a bit-for-bit forensic copy of storage to preserve evidence integrity
Answer + AI explanation with Pro
20. Which term means: "analyzing RAM captures to find running malware, injected code, and artifacts"?
Mid
A.Disk imaging
B.YARA rules
C.Polymorphic malware
D.Memory forensics
Answer + AI explanation with Pro
21. Which statement is correct?
Mid
A.Memory forensics — analyzing RAM captures to find running malware, injected code, and artifacts
B.Memory forensics — malware that mutates its code on each infection to evade signature detection
C.Memory forensics — stealthy malware that hides its presence and grants persistent privileged access
D.Memory forensics — executing suspect files in an isolated environment to observe their behavior safely
Answer + AI explanation with Pro
22. What is Sandboxing?
Mid
A.reconstructing the sequence of events from filesystem and log timestamps during an investigation
B.malware disguised as legitimate software to trick users into running it
C.executing suspect files in an isolated environment to observe their behavior safely
D.creating a bit-for-bit forensic copy of storage to preserve evidence integrity
Answer + AI explanation with Pro
23. Which term means: "executing suspect files in an isolated environment to observe their behavior safely"?
Mid
A.Sandboxing
B.Rootkit
C.Trojan
D.Timeline analysis
Answer + AI explanation with Pro
24. Which statement is correct?
Mid
A.Sandboxing — pattern-matching rules that identify and classify malware by textual or binary signatures
B.Sandboxing — analyzing RAM captures to find running malware, injected code, and artifacts
C.Sandboxing — executing suspect files in an isolated environment to observe their behavior safely
D.Sandboxing — malware or device that records keystrokes to capture credentials and data
Answer + AI explanation with Pro
25. What is Disk imaging?
Senior
A.creating a bit-for-bit forensic copy of storage to preserve evidence integrity
B.self-replicating malware that spreads across networks without user interaction
C.malware or device that records keystrokes to capture credentials and data
D.reconstructing the sequence of events from filesystem and log timestamps during an investigation
Answer + AI explanation with Pro
26. Which term means: "creating a bit-for-bit forensic copy of storage to preserve evidence integrity"?
Senior
A.Polymorphic malware
B.Disk imaging
C.Sandboxing
D.Timeline analysis
Answer + AI explanation with Pro
27. Which statement is correct?
Senior
A.Disk imaging — creating a bit-for-bit forensic copy of storage to preserve evidence integrity
B.Disk imaging — executing suspect files in an isolated environment to observe their behavior safely
C.Disk imaging — pattern-matching rules that identify and classify malware by textual or binary signatures
D.Disk imaging — malicious code that runs in memory using legitimate tools, leaving little on disk
Answer + AI explanation with Pro
28. What is YARA rules?
Senior
A.reconstructing the sequence of events from filesystem and log timestamps during an investigation
B.self-replicating malware that spreads across networks without user interaction
C.pattern-matching rules that identify and classify malware by textual or binary signatures
D.stealthy malware that hides its presence and grants persistent privileged access
Answer + AI explanation with Pro
29. Which term means: "pattern-matching rules that identify and classify malware by textual or binary signatures"?
Senior
A.YARA rules
B.Disk imaging
C.Timeline analysis
D.Fileless malware
Answer + AI explanation with Pro
30. Which statement is correct?
Senior
A.YARA rules — malware that attaches to a host file and spreads when that file is executed
B.YARA rules — pattern-matching rules that identify and classify malware by textual or binary signatures
C.YARA rules — malware disguised as legitimate software to trick users into running it
D.YARA rules — malware or device that records keystrokes to capture credentials and data
Answer + AI explanation with Pro
Showing 30 of 54 Malware & Forensics questions — the full set, with answers, explanations and an AI tutor on every question, is inside.
Free to start
Start with a free readiness check
Sign up free for the 2-minute IT readiness check and a scored result. Answers, explanations and the AI tutor on every Malware & Forensics question come with Pro.