nerdexam
GIAC

GSEC · Question #23

What type of malware is a self-contained program that has the ability to copy itself without parasitically infecting other host code?

The correct answer is D. Worms. A worm is a self-contained, self-replicating malware program that spreads independently without needing to attach itself to or modify existing host files.

Windows and Malware

Question

What type of malware is a self-contained program that has the ability to copy itself without parasitically infecting other host code?

Options

  • ATrojans
  • BBoot infectors
  • CViruses
  • DWorms

How the community answered

(37 responses)
  • A
    11% (4)
  • B
    3% (1)
  • C
    3% (1)
  • D
    84% (31)

Why each option

A worm is a self-contained, self-replicating malware program that spreads independently without needing to attach itself to or modify existing host files.

ATrojans

Trojans do not self-replicate; they disguise themselves as legitimate software to trick users into executing malicious code.

BBoot infectors

Boot infectors target the master boot record or volume boot record and replicate via boot sectors, not as self-contained programs that spread independently over a network.

CViruses

Viruses require a host file to attach to and modify in order to replicate, meaning they are parasitic and not self-contained, which is the opposite of the behavior described.

DWormsCorrect

Worms are standalone executable programs that replicate across systems autonomously without requiring a host file to parasitically infect, which is the key distinguishing characteristic in the question. Unlike viruses, worms do not attach to legitimate code but instead exploit network services, vulnerabilities, or user actions to propagate. This self-contained replication capability is the defining technical trait that separates worms from viruses.

Concept tested: Distinguishing worms from other malware types

Source: https://csrc.nist.gov/glossary/term/worm

Topics

#worm#malware classification#self-replicating code#malware types

Community Discussion

No community discussion yet for this question.

Full GSEC Practice