Examkin

Question

Difficulty: EasyMalware Types and Indicators of Compromise

An incident responder identifies an active threat on an enterprise network where a malicious program continuously scans adjacent hosts across the local subnet and automatically copies itself to available network shares without requiring any user execution or logged-in credentials. Which of the following malware types is primarily characterized by this autonomous network replication capability?

  1. WormAnswer
  2. B
    Trojan
  3. C
    Logic bomb
  4. D
    Keylogger

Answer

Worm
Worms are stand-alone malicious programs that autonomously replicate across networks without requiring user interaction or a host file to attach to.

Step-by-Step Solution

1
Analyze the operational characteristics described in the scenario.
The malware independently scans local network subnets and replicates itself without user interaction.
Identifying self-propagation mechanism helps classify the malware family.
2
Compare propagation behavior against standard malware definitions.
Autonomous propagation over network connections is the defining feature of a worm.
Trojans, keyloggers, and logic bombs depend on user triggers, execution payloads, or timed logic rather than self-replication.

Key Concept

Malware Propagation Mechanisms - Worm vs. Trojan
Rate this question

Topics

Malware Types and Indicators of Compromise

More questions from this topic