nerdexam
GIAC

GCIH · Question #26

What is the major difference between a worm and a Trojan horse?

The correct answer is C. A worm is self replicating, while a Trojan horse is not. The defining technical difference between a worm and a Trojan horse is that a worm self-replicates and spreads autonomously, while a Trojan horse requires user execution and does not replicate. Both are forms of malicious programs.

Malware Analysis & Advanced Persistent Threats

Question

What is the major difference between a worm and a Trojan horse?

Options

  • AA worm spreads via e-mail, while a Trojan horse does not.
  • BA worm is a form of malicious program, while a Trojan horse is a utility.
  • CA worm is self replicating, while a Trojan horse is not.
  • DA Trojan horse is a malicious program, while a worm is an anti-virus software.

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    93% (25)

Why each option

The defining technical difference between a worm and a Trojan horse is that a worm self-replicates and spreads autonomously, while a Trojan horse requires user execution and does not replicate. Both are forms of malicious programs.

AA worm spreads via e-mail, while a Trojan horse does not.

Email propagation is not a defining or exclusive characteristic of worms - they also spread via network shares, unpatched vulnerabilities, and removable media - so email is not the major technical differentiator.

BA worm is a form of malicious program, while a Trojan horse is a utility.

A Trojan horse is also a form of malicious program, not a utility; classifying it as a utility is technically incorrect since both worms and Trojans are categorized as malware.

CA worm is self replicating, while a Trojan horse is not.Correct

A worm is specifically defined by its self-replication capability - it copies itself and spreads across networks without user interaction. A Trojan horse, by contrast, does not replicate itself and must be deliberately installed or run by a user who has been deceived into believing the program is legitimate software. This self-replication capability is the primary technical differentiator between the two malware families.

DA Trojan horse is a malicious program, while a worm is an anti-virus software.

This answer is entirely reversed - a worm is malicious software, not antivirus software, and a Trojan horse is also malicious, making both parts of this choice factually wrong.

Concept tested: Distinguishing worm self-replication from Trojan horse behavior

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-83r1.pdf

Topics

#worm#Trojan horse#malware comparison#self-replication

Community Discussion

No community discussion yet for this question.

Full GCIH Practice