A system administrator notices that a server's network traffic is unusually high, but the process list does not show any suspicious processes. The administrator also finds that certain files and registry keys are not visible even when the system is booted into normal mode. Which type of malware is most likely responsible?

A rootkit that hides malicious processes, files, and registry keys from the operating system.

A backdoor that listens on a non-standard port.

A trojan that disguises itself as a legitimate system process.

A scheduled task that runs a malicious script.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 5

Maintaining Access and Persistence CEH Practice Questions (Page 10)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

9concepts

Questions 46–46

46application · medium
A system administrator notices that a server's network traffic is unusually high, but the process list does not show any suspicious processes. The administrator also finds that certain files and registry keys are not visible even when the system is booted into normal mode. Which type of malware is most likely responsible?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Maintaining Access and Persistence CEH Practice Questions (Page 10)

Questions 46–46

Keep studying — System Hacking Phases and Attack Techniques