ITPEC FE Morning April 2023 Question 36

Bot — malware that waits for the attacker's commands and then attacks other computers.

A bot connects to a command-and-control (C&C) server and stays idle until the attacker sends instructions. Many infected machines form a botnet, which is used for DDoS attacks, spam and further infections. Remote activation by the attacker is its defining feature.

Answer (a)

Why not others:

• •(b) Rootkit — a set of tools that hides an intruder's presence (processes, files, back doors) after a break-in; its job is concealment, not attacking other hosts on command.
• •(c) Trojan Horse — disguises itself as useful software so the user installs it, then does harm on that computer; it is defined by the disguise, not by remote activation.
• •(d) Worm — copies itself to other computers over the network on its own, without the attacker triggering each action.

Key rule: Name malware by its defining trait: a bot is remote-controlled, a worm spreads by itself, a Trojan relies on disguise, a rootkit on concealment.

Security · AI-written, may contain errors