A software program that performs a useful purpose but also has a hidden destructive purpose...

A Trojan horse is a type of malicious software program that disguises itself as a legitimate or useful application while secretly performing a malicious action behind the scenes. It derives its name from the Greek mythological story of the Trojan Horse, where a deceptive gift concealed enemy forces. Similarly, Trojan horse malware may appear benign or even helpful, such as a file or app, but it allows unauthorized access, data theft, or other harmful activities.

Characteristics of a Trojan Horse:

Deceptive Appearance: It appears to serve a useful or harmless purpose.

Hidden Functionality: It carries out destructive, spying, or harmful activities in the background without the user's consent or knowledge.

Comparison with Other Malware Types:

Logic Bomb (A): A logic bomb is triggered by specific conditions (e.g., a date or an event). It is not typically hidden within a useful program.

Virus (B): A virus replicates itself and spreads by attaching to other files or programs. It often relies on user interaction to propagate.

Worm (D): A worm spreads autonomously across networks without needing to attach to other files or programs.

Examples of Damage by Trojans:

Installing spyware to monitor user activity.

Providing a backdoor for hackers to control the system.

Deleting or corrupting files.

References:

ASIS Certified Protection Professional (CPP®) Exam Guide recommends understanding the different types of malware and their implications for cybersecurity.

In cybersecurity frameworks like NIST SP 800-53, understanding threats such as Trojans is essential for effective risk management and incident response.

Conclusion: Trojan horse malware is defined by its ability to deceive users into running it while secretly performing unauthorized actions. As this matches the description in the question, "C. Trojan horse" is the correct answer.

ASIS CPP® References:

Domain 6 (Information Security): Focus on threats and vulnerabilities.

Domain 3 (Physical Security): Incorporates cybersecurity elements related to software and systems.

Recommended Practices: NIST SP 800-53 for understanding threats like Trojans.