GIAC
GSEC · Question #23
GSEC Question #23: Real Exam Question with Answer & Explanation
The correct answer is D. Worms. A worm is a self-contained, self-replicating malware program that spreads independently without needing to attach itself to or modify existing host files.
Question
What type of malware is a self-contained program that has the ability to copy itself without parasitically infecting other host code?
Options
- ATrojans
- BBoot infectors
- CViruses
- DWorms
Explanation
A worm is a self-contained, self-replicating malware program that spreads independently without needing to attach itself to or modify existing host files.
Common mistakes.
- A. Trojans do not self-replicate; they disguise themselves as legitimate software to trick users into executing malicious code.
- B. Boot infectors target the master boot record or volume boot record and replicate via boot sectors, not as self-contained programs that spread independently over a network.
- C. Viruses require a host file to attach to and modify in order to replicate, meaning they are parasitic and not self-contained, which is the opposite of the behavior described.
Concept tested. Distinguishing worms from other malware types
Reference. https://csrc.nist.gov/glossary/term/worm
Community Discussion
No community discussion yet for this question.