Computer Science MCQs – Page 80 (Q791-800)

A computer virus is correctly defined as a malicious program that can replicate itself and spread to other computers, often causing harm, typically by attaching itself to legitimate files or programs and activating when that infected host is executed, at which point it may corrupt data, steal information, or cause various other forms of damage to the infected system. The term 'virus' draws a deliberate analogy to biological viruses, since both require a host to replicate and spread, and both can cause varying degrees of harm to their host depending on the specific strain. Computer viruses have existed since the early days of personal computing, with early examples like Elk Cloner in 1982 spreading via floppy disks, evolving dramatically in sophistication and distribution methods, particularly with the rise of internet connectivity and email. Understanding computer viruses as a foundational, historically significant category of malware is essential basic cybersecurity literacy, though modern threats have expanded to include many other distinct types of malicious software beyond just self-replicating viruses.

A computer virus typically spreads correctly by attaching itself to files or programs and executing when the host is run, often via infected files, email, or removable drives, meaning the virus remains dormant and harmless until the specific file or program it has infected is actually opened or executed by an unsuspecting user, at which point the virus activates and can begin its intended malicious behavior. Common historical and ongoing infection vectors include email attachments disguised as legitimate documents, infected files downloaded from untrustworthy websites, and previously infected removable storage devices like USB flash drives connected to a new, uninfected computer. Understanding these common spreading mechanisms helps explain practical cybersecurity best practices, such as being cautious about opening unexpected email attachments, avoiding downloads from untrustworthy sources, and scanning removable drives before opening their contents. This knowledge of typical virus transmission methods is foundational to practicing safe, informed everyday computer usage and avoiding common infection vectors.

Antivirus software is correctly used for detecting, preventing, and removing malicious software from a computer, working by scanning files and monitoring system behavior for patterns matching known malware signatures or suspicious activity, then quarantining or removing detected threats before they can cause significant harm to the system or its data. Modern antivirus solutions have evolved considerably beyond simple signature-based detection, increasingly incorporating behavioral analysis and machine learning techniques to identify new, previously unknown threats based on suspicious patterns of activity rather than requiring an exact match to a known malware signature. While antivirus software provides an essential layer of defense, cybersecurity experts generally recommend combining it with other safe computing practices, such as keeping all software updated, avoiding suspicious email attachments and links, and using strong, unique passwords for different accounts. Understanding antivirus software's core detection and removal function is foundational practical cybersecurity literacy for protecting personal and organizational computer systems.

McAfee is correctly identified as a well-known antivirus software, one of the pioneering companies in the cybersecurity industry, founded in 1987 and offering comprehensive protection against various forms of malware, including viruses, ransomware, and phishing attempts, for both individual consumers and business customers. In contrast, MS Word, Excel, and PowerPoint are Microsoft Office productivity applications for document creation, spreadsheets, and presentations respectively, entirely unrelated to malware detection and computer security functions. Other well-known antivirus software providers include Norton, Kaspersky, Bitdefender, and Windows Defender (built into modern Windows), each offering varying levels of protection, features, and pricing to address the ongoing and continuously evolving landscape of cybersecurity threats. Understanding McAfee as a recognizable, real-world example of dedicated antivirus software helps ground the abstract concept of malware protection in a familiar, practical context.

A worm, in computer security, is correctly defined as self-replicating malware that spreads across networks without needing to attach to a host file, distinguishing it from a traditional virus, which requires a host file or program to attach to and needs some form of user action, like opening an infected file, to activate and spread. Worms can independently exploit vulnerabilities in network software or operating systems to automatically copy themselves from one connected computer to another, sometimes spreading extremely rapidly across large networks or even the entire internet without requiring any direct user interaction at all. Historically significant worms, like the Morris Worm in 1988 and the more recent WannaCry ransomware worm in 2017, have caused widespread damage and disruption precisely because of this ability to spread autonomously and rapidly across vulnerable networked systems. Understanding the distinction between a worm's independent, network-based spreading and a virus's dependence on a host file is an important nuance within the broader category of self-replicating malware.

A Trojan horse in computing is correctly defined as malware disguised as legitimate software to trick users into installing it, drawing a deliberate reference to the ancient Greek myth in which soldiers hid inside a large wooden horse presented as a gift to gain entry into the city of Troy, deceiving the defenders into unknowingly bringing danger inside their own walls. Unlike viruses and worms, Trojan horses don't self-replicate; instead, they rely entirely on social engineering and deception, often disguised as a desirable program, a legitimate-looking software update, or an enticing free download, to convince users to voluntarily install the malicious payload themselves. Once installed and activated, a Trojan horse can perform a wide range of malicious actions, including creating backdoor access for attackers, stealing sensitive data, or installing additional malware onto the compromised system. Understanding the Trojan horse's core deceptive strategy, tricking users into voluntary installation rather than spreading autonomously, is an important distinction within the broader landscape of different malware categories.

Ransomware is correctly defined as malicious software that encrypts a victim's data and demands payment for its release, effectively locking a victim out of their own files or entire system by converting the data into an unreadable, encrypted format, then demanding a ransom payment, often in cryptocurrency to help attackers avoid traceability, in exchange for providing the decryption key needed to restore access. Ransomware attacks have grown dramatically in scale and sophistication in recent years, targeting not just individual computer users but also large organizations, hospitals, and even critical infrastructure providers, sometimes causing severe operational disruption and significant financial losses. Notable ransomware attacks like WannaCry in 2017 demonstrated the potential for such malware to spread rapidly and cause widespread global damage, highlighting the critical importance of proactive cybersecurity measures like regular data backups and prompt software patching. Understanding ransomware as a particularly damaging and financially motivated category of malware is essential modern cybersecurity literacy, given its significant and growing real-world impact.

Spyware is correctly defined as malicious software that secretly monitors and collects user information without consent, operating covertly in the background of an infected system to gather sensitive data such as browsing habits, login credentials, keystrokes, or other personal information, which is then typically transmitted back to the attacker for malicious purposes like identity theft or unauthorized account access. Unlike more overtly disruptive malware like ransomware, spyware is specifically designed to remain hidden and undetected for as long as possible, maximizing the amount of sensitive information it can covertly collect over an extended period before potentially being discovered. Common spyware variants include keyloggers, which specifically record every keystroke a user types, potentially capturing passwords and other sensitive typed information. Understanding spyware's core covert data-collection function, distinguishing it from more overtly damaging malware categories, is important cybersecurity literacy for protecting personal privacy and sensitive information.

Adware is correctly defined as software that automatically displays or downloads unwanted advertisements, typically bundled with free software or installed without a user's full understanding, generating revenue for its creators by bombarding the infected system with intrusive pop-up ads, altered browser homepages, or injected advertising content within otherwise normal web browsing. While adware is generally considered less immediately dangerous than more overtly malicious categories like ransomware or spyware, it can still significantly degrade system performance, compromise browsing privacy by tracking user behavior for targeted advertising, and create an overall frustrating and intrusive user experience. Some adware exists in a legal gray area, distributed as a legitimate, if unwanted, way for free software developers to monetize their products, while more aggressive variants cross into outright malicious behavior by resisting removal or bundling additional harmful software. Understanding adware as this generally less severe, but still unwanted and potentially privacy-compromising, category of software rounds out the broader spectrum of malware types users should be aware of.

The purpose of regularly updating antivirus software is correctly to ensure it can detect and protect against the latest known threats, since cybercriminals continuously develop new malware variants and attack techniques, meaning an antivirus program's threat detection database and detection algorithms must be constantly refreshed to remain effective against these emerging dangers. Antivirus software relies heavily on regularly updated databases of known malware signatures, along with improved behavioral detection algorithms, to identify and block both previously known threats and newly emerging ones that share suspicious characteristics with established malware patterns. An outdated antivirus program, even if initially effective, becomes progressively less capable of protecting against the constantly evolving threat landscape, potentially leaving a system vulnerable to newer malware variants specifically designed to evade older, unpatched detection methods. Understanding why continuous updates are essential to antivirus software's ongoing effectiveness reinforces the broader cybersecurity principle that digital security is not a one-time setup but an ongoing, continuously maintained process.