Information Systems and Controls (ISC) CPA Practice Exam 2025 - Free CPA Exam Practice Questions and Study Guide

The intention behind malware is primarily to perform unauthorized actions that negatively impact the confidentiality, integrity, or availability of information systems. This can include activities such as stealing sensitive data, disrupting operations, or gaining unauthorized access to systems. By infiltrating the system, malware can compromise confidential information and pose significant risks to organizations and individuals.

Malware is designed to exploit vulnerabilities within systems, targeting the underlying security measures in order to carry out malicious objectives. These objectives can vary, from data theft and espionage to causing operational disruptions or financial loss.

In contrast, options that suggest enhancing system performance, providing beneficial applications, or securing systems do not align with the true purpose of malware, which is inherently malicious and damaging to users and organizations. The primary goal of malware is malicious in nature, focusing on unauthorized actions rather than any constructive or protective measures.