Study. uk . com
  1. Home
  2. All questions
  3. Question 478

CompTIA Security+ study material · question 478 of 611

Why does fileless malware evade a product that scans files on disk?

  1. It disables the scanner's driver
  2. It encrypts itself before writing to disk
  3. It runs from memory and uses built-in system binaries
  4. It executes only during boot
Show the answer

Answer: C. It runs from memory and uses built-in system binaries

There is little on disk to scan, so detection has to come from process and command-line behaviour.

Challenge yourself on this topic → Study as cards