(ISC)2 Certified in Cybersecurity Practice Exam

What type of malicious code acts like a "robot" for an attacker?

1. Worm

2. Spyware

3. Bot

4. Virus

The correct answer is: Bot

The correct choice is a type of malicious code known as a "bot." Bots are designed to perform automated tasks over the internet, often under the control of a remote attacker. When a device is infected with a bot, it can be used to execute a variety of tasks, such as sending spam emails, launching distributed denial-of-service (DDoS) attacks, or gathering sensitive data, all without the user’s knowledge. They act like "robots" because they perform actions automatically based on commands received from a command-and-control server, making them valuable tools for cybercriminals. Worms and viruses are also forms of malware, but they operate differently. Worms propagate themselves across networks without needing to attach to a host file, while viruses require a host file to spread and usually attach themselves to other programs. Spyware, on the other hand, primarily focuses on secretly collecting user data and monitoring user activity but does not necessarily perform automatic tasks like a bot. Therefore, the specific functionality of bots aligns perfectly with the description of acting like a "robot" for an attacker.