A user on your corporate network reports that their system is running slowly and that an unknown process named 'svch0st.exe' is consuming high CPU. You discover that the user recently installed a free 'system optimizer' from a pop-up advertisement. The process persists after reboot and a scheduled task has been created. Which combination of actions best addresses the immediate threat and prevents recurrence?

Disable the scheduled task, kill the process, and delete the executable from the user's temp folder.

Use System Restore to roll back the system to a point before the user installed the optimizer.

Disconnect the system from the network, boot into Safe Mode, remove the scheduled task and registry Run keys, and then run a malware scanner.

Run a full antivirus scan, quarantine the detected file, and then restore the system from a recent backup.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 7

Malware Threats (Trojans, Viruses, Ransomware) CEH Practice Questions (Page 11)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

10concepts

Questions 51–51

51application · medium
A user on your corporate network reports that their system is running slowly and that an unknown process named 'svch0st.exe' is consuming high CPU. You discover that the user recently installed a free 'system optimizer' from a pop-up advertisement. The process persists after reboot and a scheduled task has been created. Which combination of actions best addresses the immediate threat and prevents recurrence?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Malware Threats (Trojans, Viruses, Ransomware) CEH Practice Questions (Page 11)

Questions 51–51

Keep studying — System Hacking Phases and Attack Techniques