A user reports that their system is running slowly and that files have been encrypted with a .locked extension. A ransom note demands payment in cryptocurrency. Which type of malware-based attack is this?

Spyware, which is a passive attack that monitors user activity.

A Trojan, which is a passive attack that hides inside legitimate software.

A worm, which is an active attack that spreads without user interaction.

Ransomware, which is an active attack that modifies files by encrypting them.

Which of the following is a distinguishing feature of an outsider attack compared to an insider attack?

The attack is always detected by intrusion detection systems

The attack always originates from a different country

The attacker uses social engineering techniques

The attacker has no authorized access to the target systems

An attacker leaves a USB drive in the company parking lot. An employee finds it and plugs it into their workstation to identify the owner. The USB drive contains malware that installs a backdoor. Which type of social engineering attack is this?

Phishing, because the attacker sends a fraudulent email.

Baiting, because the attacker uses a physical lure to entice the employee.

Pretexting, because the attacker creates a false scenario.

Tailgating, because the attacker follows the employee into the building.

EC-CouncilCertified Ethical Hacker

Domain 1Objective 2

Classification and Types of Attacks CEH Practice Questions (Page 5)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

12concepts

Questions 21–25

21application · medium
A security guard finds that a server in a locked data center has been opened and a hardware keylogger has been attached to the keyboard port. The keylogger is designed to capture keystrokes. Which type of attack is this?
Select an answer first
22application · easy
A user reports that their system is running slowly and that files have been encrypted with a .locked extension. A ransom note demands payment in cryptocurrency. Which type of malware-based attack is this?
Select an answer first
23foundation · easy
Which of the following is a distinguishing feature of an outsider attack compared to an insider attack?
Select an answer first
24expert · easy
An attacker leaves a USB drive in the company parking lot. An employee finds it and plugs it into their workstation to identify the owner. The USB drive contains malware that installs a backdoor. Which type of social engineering attack is this?
Select an answer first
25application · medium
A security consultant is assessing a company's wireless network. The consultant sets up a laptop with a wireless card configured to broadcast the same SSID as the company's legitimate access point, but with a stronger signal. Users connecting to this rogue AP are prompted to re-enter their domain credentials. Which type of attack is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Classification and Types of Attacks CEH Practice Questions (Page 5)

Questions 21–25

A security guard finds that a server in a locked data center has been opened and a hardware keylogger has been attached to the keyboard port. The keylogger is designed to capture keystrokes. Which type of attack is this?

A user reports that their system is running slowly and that files have been encrypted with a .locked extension. A ransom note demands payment in cryptocurrency. Which type of malware-based attack is this?

Which of the following is a distinguishing feature of an outsider attack compared to an insider attack?

An attacker leaves a USB drive in the company parking lot. An employee finds it and plugs it into their workstation to identify the owner. The USB drive contains malware that installs a backdoor. Which type of social engineering attack is this?

Keep studying — Information Security and Ethical Hacking Overview