A security analyst is analyzing a phishing email that contains a malicious attachment. The analyst wants to extract indicators of compromise (IOCs) from the attachment without executing it. Which approach is the most appropriate?

Use a static analysis tool to examine the attachment's metadata and embedded strings

Open the attachment in a text editor to view its contents

Run the attachment in a sandbox to observe its behavior

Submit the attachment to an online virus scanner

Which of the following is an effective component of a security awareness training program?

Conducting simulated phishing exercises

Publishing employee passwords on a shared drive

Limiting training to once per year

Which of the following is a procedural countermeasure to mitigate social engineering attacks?

Implementing multi-factor authentication (MFA)

Establishing a policy for verifying identity before sharing sensitive information

Deploying an intrusion detection system (IDS)

EC-CouncilCertified Ethical Hacker

Domain 4Objective 2

Social Engineering and Phishing CEH Practice Questions (Page 8)

Part of the Network and Perimeter Hacking domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

6concepts

Questions 36–38

36expert · hard
A security analyst is analyzing a phishing email that contains a malicious attachment. The analyst wants to extract indicators of compromise (IOCs) from the attachment without executing it. Which approach is the most appropriate?
Select an answer first
37foundation · easy
Which of the following is an effective component of a security awareness training program?
Select an answer first
38foundation · easy
Which of the following is a procedural countermeasure to mitigate social engineering attacks?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Social Engineering and Phishing CEH Practice Questions (Page 8)

Questions 36–38

A security analyst is analyzing a phishing email that contains a malicious attachment. The analyst wants to extract indicators of compromise (IOCs) from the attachment without executing it. Which approach is the most appropriate?

Which of the following is an effective component of a security awareness training program?

Which of the following is a procedural countermeasure to mitigate social engineering attacks?

Keep studying — Network and Perimeter Hacking