Information Security Basics

Among the types of malware, which statement correctly describes a worm?

  1. AIt runs as a standalone program without attaching to other files and spreads on its own by sending copies of itself to other computers over the network
  2. BIt attaches itself to other program files and runs when that program is executed, spreading the infection
  3. CIt poses as useful software so that users install it, then does malicious things behind the scenes, but does not spread copies of itself
Show answer and explanation

Answer: A. It runs as a standalone program without attaching to other files and spreads on its own by sending copies of itself to other computers over the network

Malware is the general term for software that performs malicious actions. A computer virus in the narrow sense attaches itself to files such as other programs and runs when that program is executed, spreading the infection to other files. A worm runs on its own without needing a host and spreads itself by sending copies to other computers on the network, for example by exploiting their vulnerabilities. It can therefore spread through an organization in a short time if unpatched vulnerabilities exist. A Trojan horse poses as useful software so that users run it, then steals information or opens a way in for remote control (a backdoor) behind the scenes, but it does not multiply by itself.

  • A. Correct. A worm runs on its own and spreads copies of itself over the network.
  • B. Attaching to other programs to spread infection is a feature of a virus in the narrow sense.
  • C. Posing as useful software to get in without multiplying by itself is a feature of a Trojan horse.
Practice this topic Back to topic

Related calculators

Books on Information Security Basics Ad

As an Amazon Associate I earn from qualifying purchases.

More Information Security Basics questions

  1. Which statement correctly describes ransomware?
  2. Regarding backups as a defense against ransomware, which method best follows the "3-2-1 rule"?
  3. Which combination correctly gives the phishing technique and a countermeasure on the user's side?
  4. Which of the following is an example of social engineering?
  5. An email claiming to be from a contact at a business partner says, "Our account for receiving payments has changed, so please pay this invoice and future ones to the new account." When business email compromise (BEC) is suspected, what is the most appropriate response?