Certified Ethical Hacker (CEH v11) — Question 176

Which of the following describes the characteristics of a Boot Sector Virus?

Answer options

• A. Modifies directory table entries so that directory entries point to the virus code instead of the actual program.
• B. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR.
• C. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR.
• D. Overwrites the original MBR and only executes the new virus code.

Correct answer: C

Explanation

The correct answer is C because a Boot Sector Virus typically infects the Master Boot Record (MBR) by moving it to another location on the hard disk and placing the virus in the original MBR location. Option A is incorrect as it refers to modifying directory entries, which is not a characteristic of Boot Sector Viruses. Option B is wrong because it mentions RAM instead of the hard disk, and D is incorrect because it implies overwriting without the relocation aspect.