FC0-U71 Security Practice Question
Which type of malware is disguised as legitimate software but performs malicious actions?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Trojan
A Trojan horse appears useful but contains harmful code, unlike viruses or worms that self-replicate.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Virus
Why it's wrong here
A virus attaches to a host file or boot sector and spreads when that code executes; it is not defined by masquerading as legitimate software. It is tempting because viruses are the archetypal malware, and would be correct if the stem described self-replicating code infecting executables rather than a disguised application.
- ✗
Ransomware
Why it's wrong here
Ransomware encrypts victim data and demands payment; disguise is incidental, not its defining behaviour. It is tempting because ransomware is often delivered inside seemingly legitimate downloads, and would be correct if the stem described files being encrypted with a payment demand rather than concealed malicious functionality.
- ✓
Trojan
Why this is correct
A Trojan masquerades as legitimate software, so users install it willingly, satisfying the disguise requirement. Unlike viruses or worms, it does not self-replicate; its payload executes through user action, such as running the installer. This matches the stem's constraint of apparent legitimacy concealing malicious behaviour.
- ✗
Worm
Why it's wrong here
A worm self-replicates across networks without a host file or user action; it is not disguised as legitimate software. The scenario describes a Trojan, which masquerades as genuine applications to trick users into executing it. Worms would be the answer if the stem described self-propagating code spreading automatically between unpatched systems.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.