GIAC Certified Forensic Analyst (GCFA) — Question 27

The MBR of a hard disk is a collection of boot records that contain disk information such as disk architecture, cluster size, and so on. The main work of the MBR is to locate and run necessary operating system files that are required to run a hard disk. In the context of the operating system, MBR is also known as the boot loader. Which of the following viruses can infect the MBR of a hard disk?
Each correct answer represents a complete solution. Choose two.

Answer options

• A. Stealth
• B. Boot sector
• C. Multipartite
• D. File

Correct answer: B, C

Explanation

The correct answers are 'Boot sector' and 'Multipartite' because both types of viruses are specifically designed to target the MBR. 'Boot sector' viruses directly infect the boot sector of the drive, while 'Multipartite' viruses can affect both the MBR and files. 'Stealth' and 'File' viruses do not inherently target the MBR, making them incorrect choices.