Which preventive measure can help reduce the risk of rootkit installation?

Granting all users administrative privileges

Keeping the operating system and applications patched with the latest security updates

Disabling the firewall to improve system performance

Using the same password for all administrator accounts

How can an attacker use steganography to conceal data exfiltration?

By encrypting the stolen data with a strong algorithm

By compressing the stolen data into a ZIP archive

By embedding stolen data into an image file and sending the image out of the network

By renaming the stolen data file to a system filename

An attacker has gained access to a Windows 10 workstation and wants to hide a malicious executable from normal directory listings and file explorers. The attacker also wants to avoid detection by basic file system audits. Which technique is most effective for hiding the file?

Store the file in an NTFS Alternate Data Stream (ADS) attached to a legitimate file

Compress the file into a ZIP archive and password-protect it

Rename the file with a .dll extension and place it in the Program Files directory

Place the file in the Windows System32 folder and mark it as a system file

How can an attacker exploit a weak logging configuration to cover their tracks?

By disabling auditing policies so that malicious actions are not recorded

By increasing the log size to store more events

By setting the log to overwrite events daily

EC-CouncilCertified Ethical Hacker

Domain 3Objective 6

Covering Tracks CEH Practice Questions (Page 1)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

10concepts

Questions 1–5

1foundation · easy
Which preventive measure can help reduce the risk of rootkit installation?
Select an answer first
2foundation · easy
How can an attacker use steganography to conceal data exfiltration?
Select an answer first
3foundation · easy
Which command can be used to detect Alternate Data Streams on a Windows system?
Select an answer first
4application · medium
An attacker has gained access to a Windows 10 workstation and wants to hide a malicious executable from normal directory listings and file explorers. The attacker also wants to avoid detection by basic file system audits. Which technique is most effective for hiding the file?
Select an answer first
5foundation · easy
How can an attacker exploit a weak logging configuration to cover their tracks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.