CompTIA Security+ (SY0-601) — Question 195

A security analyst notices that specific files are being deleted each time a systems administrator is on vacation. Which of the following BEST describes the type of malware that is running?

Answer options

• A. Fileless virus
• B. Logic bomb
• C. Keylogger
• D. Ransomware

Correct answer: B

Explanation

The correct answer is B, Logic bomb, as it describes malware that triggers based on specific conditions, such as the absence of an administrator. A Fileless virus (A) operates in memory rather than on the file system, a Keylogger (C) captures keystrokes rather than deleting files, and Ransomware (D) encrypts files for ransom rather than simply deleting them.