Exam 312-50v13 Topic 1 Question 466 Discussion
Actual exam question for ECCouncil's 312-50v13 exam
Question #: 466
Topic #: 1
Question #: 466
Topic #: 1
Malware remains dormant until triggered and changes its code with each infection. What malware type is responsible, and how should it be mitigated?
Suggested Answer: B Vote an answer
This scenario precisely matches polymorphic malware, a type of advanced malware described in CEH v13 Malware Threats. Polymorphic malware dynamically alters its code, encryption, or signature each time it propagates, allowing it to evade traditional signature-based antivirus detection.
Additionally, the malware's ability to remain dormant until triggered indicates logic-based activation, which is common in advanced threats designed to avoid sandbox detection.
CEH v13 emphasizes that polymorphic malware cannot be reliably detected using static signatures. Instead, organizations must rely on behavior-based detection, heuristic analysis, and advanced threat protection systems capable of identifying suspicious runtime behavior.
Options A, C, and D do not match the described behavior. Adware focuses on advertising. Worms self- propagate aggressively. Rootkits focus on stealth and persistence, not code mutation.
Therefore, Option B is the correct answer.
Additionally, the malware's ability to remain dormant until triggered indicates logic-based activation, which is common in advanced threats designed to avoid sandbox detection.
CEH v13 emphasizes that polymorphic malware cannot be reliably detected using static signatures. Instead, organizations must rely on behavior-based detection, heuristic analysis, and advanced threat protection systems capable of identifying suspicious runtime behavior.
Options A, C, and D do not match the described behavior. Adware focuses on advertising. Worms self- propagate aggressively. Rootkits focus on stealth and persistence, not code mutation.
Therefore, Option B is the correct answer.
by Primo at May 20, 2026, 02:01 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).