An endpoint detection system flags unusual PowerShell activity. Investigation reveals a malicious script running entirely in RAM, heavily obfuscated, leaving no executable footprint on the hard drive. This is...
Answers
ARootkit
BLogic bomb
CFileless malware
DTrojan
Correct answer: C — Fileless malware
Fileless malware operates in memory (RAM) and abuses native legitimate tools (like PowerShell or WMI) rather than dropping an executable file on the disk.
MIFOTRA exam practicealigned to CompTIA Security+ SY0-701·4 marks·Hard