How does network segmentation help defend against malware?

It encrypts all network traffic

It prevents malware from spreading to other network segments

It eliminates the need for antivirus

A user on your network has a trojan that was installed via a fake software update. The trojan creates a Windows service for persistence and communicates with a C2 server. You need to remove the trojan and prevent reinfection. Which approach is most effective?

Reinstall the operating system from scratch.

Disconnect the system, remove the service, delete the trojan files, and then apply security updates and educate the user.

Run a full antivirus scan and quarantine the trojan files.

Restore the system to a previous restore point.

Which of the following is a common delivery method for a trojan?

Exploiting a network service vulnerability directly

Attaching to an email as a self-executing worm

Infecting the master boot record

Bundling with a free software download

A company wants to reduce the risk of ransomware infections spreading from a user's workstation to the central file server. Which control is most effective at limiting lateral movement?

Install antivirus on all workstations and the file server

Implement network segmentation so workstations cannot directly reach the file server

Disable the file server's network shares

Train users to recognize phishing emails

A malware analyst has a suspicious binary that is packed with UPX. The analyst wants to perform static analysis to understand the malware's imports and strings. What is the first step the analyst should take?

Use a debugger to step through the code.

Unpack the binary using a tool like UPX itself or a dedicated unpacker.

Run the binary in a sandbox to observe its behavior.

Scan the binary with antivirus to identify known malware.

EC-CouncilCertified Ethical Hacker

Domain 3Objective 7

Malware Threats (Trojans, Viruses, Ransomware) CEH Practice Questions (Page 6)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

10concepts

Questions 26–30

26foundation · easy
How does network segmentation help defend against malware?
Select an answer first
27expert · hard
A user on your network has a trojan that was installed via a fake software update. The trojan creates a Windows service for persistence and communicates with a C2 server. You need to remove the trojan and prevent reinfection. Which approach is most effective?
Select an answer first
28foundation · easy
Which of the following is a common delivery method for a trojan?
Select an answer first
29application · medium
A company wants to reduce the risk of ransomware infections spreading from a user's workstation to the central file server. Which control is most effective at limiting lateral movement?
Select an answer first
30application · medium
A malware analyst has a suspicious binary that is packed with UPX. The analyst wants to perform static analysis to understand the malware's imports and strings. What is the first step the analyst should take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.