Cisco Cyber Security Practice Exam

What type of malware may have been introduced if employees report slow network access due to a third-party scanning program downloaded by an employee?

1. Trojan

2. Worm

3. Ransomware

4. Virus

The correct answer is: Worm

The situation described indicates a slowdown in network performance due to a third-party scanning program that an employee inadvertently downloaded. This scenario aligns well with the characteristics of a worm. Worms are a type of self-replicating malware that can spread across networks without direct human intervention. They exploit vulnerabilities in operating systems or applications, allowing them to propagate and consume network resources. As a result, they can cause significant slowdowns and disruptions in network performance, which aligns with the employees' reports of slow network access. While other types of malware like Trojans, ransomware, and viruses can also impact network performance, they typically operate in different ways. For instance, a Trojan might provide unauthorized access or perform harmful actions but usually relies on disguising itself as legitimate software rather than self-replicating across the network. Ransomware primarily focuses on encrypting files and demanding a ransom, while a virus typically requires a host file to spread. In this case, the indication of slow network performance due to an external scanning tool leads more directly to the behavior exhibited by worms.