Which of the following is a common malware infection vector?

Enabling full-disk encryption on a laptop

Regularly updating operating system software

Email attachments containing malicious macros

Using strong, unique passwords for online accounts

A forensic investigator is preparing to analyze a hard drive that may contain malware. The investigator wants to ensure that the analysis does not alter the original evidence. Which tool or technique should the investigator use?

Running a file system check on the original drive

A standard USB adapter to connect the drive to the analysis workstation

A hardware write-blocker when creating a forensic image

Booting the analysis workstation with the drive attached

A forensic examiner is analyzing a malware sample that was obtained from a company's internal network. The examiner wants to share the sample with a trusted third-party research group for further analysis. What should the examiner do first?

Check the company's data-sharing policies and obtain proper authorization

Share the sample without any restrictions to facilitate research

Upload the sample to a public malware repository

Remove the malware's network indicators and then share it

EC-CouncilDigital Forensics Essentials

Domain 7Objective 2

Malware Forensics Fundamentals DFE Practice Questions (Page 3)

Part of the Malware Forensics domain, which makes up ~15% of our current practice bank.

45questions here

9free pages

6concepts

Questions 11–15

11foundation · easy
Which of the following is a common malware infection vector?
Select an answer first
12application · medium
An organization's security team discovers that a file named 'invoice.pdf.exe' was downloaded from a malicious website and executed by an employee. The executable then created a backdoor and allowed remote access. Which malware classification best describes this threat?
Select an answer first
13application · medium
A company's email security gateway blocks executable attachments, but an employee still gets infected with malware. The malware was delivered as a PDF file that contained a malicious link. When the employee clicked the link, a drive-by download occurred. Which infection vector is primarily responsible for this infection?
Select an answer first
14application · medium
A forensic investigator is preparing to analyze a hard drive that may contain malware. The investigator wants to ensure that the analysis does not alter the original evidence. Which tool or technique should the investigator use?
Select an answer first
15application · medium
A forensic examiner is analyzing a malware sample that was obtained from a company's internal network. The examiner wants to share the sample with a trusted third-party research group for further analysis. What should the examiner do first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.

Malware Forensics Fundamentals DFE Practice Questions (Page 3)

Questions 11–15

Which of the following is a common malware infection vector?

An organization's security team discovers that a file named 'invoice.pdf.exe' was downloaded from a malicious website and executed by an employee. The executable then created a backdoor and allowed remote access. Which malware classification best describes this threat?

A forensic investigator is preparing to analyze a hard drive that may contain malware. The investigator wants to ensure that the analysis does not alter the original evidence. Which tool or technique should the investigator use?

A forensic examiner is analyzing a malware sample that was obtained from a company's internal network. The examiner wants to share the sample with a trusted third-party research group for further analysis. What should the examiner do first?

Keep studying — Malware Forensics