ITPEC IP October 2023 Question 38

Which of the following is the most appropriate explanation of the operation that spyware is meant to perform?

a)To destabilize the operation of the OS and softwareb)To delete files from the file system without user consentc)To hijack the web browser and forcefully execute a particular operationd)To collect personal and other information without being noticed by users

Explanation

Collecting personal and other information without being noticed — that is what spyware is made for.

Spyware gets onto a PC hidden inside free software or through a malicious site, runs unnoticed, and records what the user does: personal information, browsing and access history, sometimes keystrokes. It then sends that information to an outside party for advertising or for fraud. Its mark is covert collection of information, so it tries not to disturb the PC in ways the user would notice.

Answer (d)

Why not others:

•(a) — making the OS and software unstable is a side effect of many kinds of malware, not the purpose of spyware, which wants to stay unnoticed
•(b) — deleting files without consent is the destructive payload of a virus or wiper
•(c) — taking over the browser and forcing operations on it, such as changing the home page or redirecting searches, is a browser hijacker

Key rule: Name malware by what it does: spyware collects information, a browser hijacker takes over the browser, ransomware demands payment, a destructive virus damages data.

Security · AI-written, may contain errors

Previous Next

Practice this exam

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.