A security analyst is categorizing an incident where an attacker sent a phishing email to an employee, who then clicked a link that downloaded a Trojan. The Trojan created a backdoor for remote access. Which classification best describes the overall attack?

Network attack, because the attacker gained remote access.

Social engineering attack, because the initial vector was a phishing email.

Malware-based attack, because the Trojan is the primary payload.

Multi-stage attack, because it involves social engineering, malware, and network access.

Which of the following is an example of a physical attack?

Stealing a laptop containing sensitive data

A security analyst notices unusual outbound traffic from a workstation to an external IP address during off-hours. The traffic appears to be a continuous stream of small packets, and the workstation is not actively used at that time. The analyst suspects the workstation is part of a botnet. Which type of attack best describes this activity?

Active attack involving a Trojan horse that enables remote control

Passive attack involving network sniffing to capture credentials

Insider attack performed by an employee during off-hours

Denial-of-service attack originating from the workstation

EC-CouncilCertified Ethical Hacker

Domain 1Objective 2

Classification and Types of Attacks CEH Practice Questions (Page 3)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

12concepts

Questions 11–15

11application · medium
A security analyst is categorizing an incident where an attacker sent a phishing email to an employee, who then clicked a link that downloaded a Trojan. The Trojan created a backdoor for remote access. Which classification best describes the overall attack?
Select an answer first
12foundation · easy
Which of the following is an example of a physical attack?
Select an answer first
13expert · medium
A security analyst is troubleshooting a wireless network issue. Users report that they are frequently disconnected from the Wi-Fi and have to reconnect. The analyst captures wireless traffic and notices a high number of deauthentication frames being sent to the clients. Which type of attack is likely occurring?
Select an answer first
14foundation · easy
Which wireless attack involves setting up a fake access point that mimics a legitimate one to intercept traffic?
Select an answer first
15application · medium
A security analyst notices unusual outbound traffic from a workstation to an external IP address during off-hours. The traffic appears to be a continuous stream of small packets, and the workstation is not actively used at that time. The analyst suspects the workstation is part of a botnet. Which type of attack best describes this activity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Classification and Types of Attacks CEH Practice Questions (Page 3)

Questions 11–15

A security analyst is categorizing an incident where an attacker sent a phishing email to an employee, who then clicked a link that downloaded a Trojan. The Trojan created a backdoor for remote access. Which classification best describes the overall attack?

Which of the following is an example of a physical attack?

Which wireless attack involves setting up a fake access point that mimics a legitimate one to intercept traffic?

Keep studying — Information Security and Ethical Hacking Overview