Which statement best distinguishes a worm from a virus?
Answer
A worm can self-replicate across networks without user execution of an infected file
Explanation
### Why this is right
The course defines worms as self-replicating malware that spreads across networks without user intervention. A virus attaches to or infects files or programs and commonly spreads when the infected item is executed.
### The concept
Malware is software designed to infiltrate, harm, exploit, disrupt, or gain unauthorized access to systems. Malware categories describe behavior, and real malicious programs can combine several behaviors. A Trojan horse is distinguished by disguising itself as legitimate software; ransomware is distinguished by locking or encrypting data and demanding payment. These labels are not interchangeable.
### The other options
- **B. A worm is always disguised as legitimate software**: Disguise as legitimate software describes a Trojan horse, not the defining feature of a worm.
- **C. A virus never infects files or programs**: File or program infection is a defining feature of a virus in the course material.
- **D. A virus is defined by encrypting files for ransom**: That describes ransomware behavior, not a virus category.
### Terms
- **Malware**: Malicious software designed to compromise, disrupt, exploit, or access systems.
- **Worm**: Self-replicating malware that can spread across networks.
- **Virus**: Malware that attaches to or infects files or programs.
### Remember
Classify malware by its behavior: infection, autonomous spread, disguise, or ransom.
Related Questions
- Which plan component most directly tells responders who may approve an external breach notification?(intermediate)
- Which activity most clearly belongs to a Security Operations Center (SOC) rather than being the primary responsibility of a Computer Security Incident Response Team (CSIRT)?(basic)
- Which tool is most directly associated in the course material with collecting and correlating logs for continuous security monitoring?(intermediate)
- In the 2016 Dyn case described in the material, what was the immediate service-level effect of the attack?(intermediate)
- A server records a successful login by an authorized employee during normal working hours. Based on the course distinction, what is this most clearly?(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free