Palo Alto Networks Cybersecurity-Practitioner Exam - Topic 2 Question 16 Discussion

Actual exam question for Palo Alto Networks's Cybersecurity-Practitioner exam

Question #: 16
Topic #: 2

[All Cybersecurity-Practitioner Questions]

Which characteristic of advanced malware makes it difficult to detect?

AData decompression

BRegistered certificates

CMorphing code

DLow traffic volumes

Show Suggested Answer

Suggested Answer: C

Morphing code, also known as polymorphism, allows advanced malware to change its code structure with each iteration or infection. This makes it extremely difficult for traditional signature-based detection tools to recognize and block the malware consistently.

by Jina at Aug 18, 2026, 12:53 AM

Limited Time Offer

25%

Off

Get Premium Cybersecurity-Practitioner Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marcelle

3 days ago

I disagree, data decompression is usually easier to spot.

upvoted 0 times

...

Tracey

8 days ago

Wait, morphing code? That sounds wild!

upvoted 0 times

...

Virgina

13 days ago

Registered certificates make it seem legit, so tricky!

upvoted 0 times

...

Valentin

19 days ago

I think low traffic volumes can be misleading too.

upvoted 0 times

...

Ty

24 days ago

Morphing code is definitely a big issue.

upvoted 0 times

...

Lachelle

29 days ago

I’m a bit confused; I thought data decompression was a tactic used by some malware, but I don’t remember it being the main characteristic that makes detection hard.

upvoted 0 times

...

Mike

1 month ago

I practiced a question similar to this, and I think low traffic volumes can help malware go unnoticed, but I'm leaning towards morphing code as the key characteristic.

upvoted 0 times

...

Tricia

1 month ago

Registered certificates sound familiar too, but I feel like they might not be the main reason for advanced malware's stealthiness.

upvoted 0 times

...

Alesia

1 month ago

I think I remember something about morphing code being a big issue for detection, but I'm not entirely sure if that's the right answer.

upvoted 0 times

...