During an incident response, an analyst discovers that a USB drive inserted by an employee automatically executed a script that modified the system's autorun settings and then downloaded a payload from a remote server. Which combination of malware components is demonstrated?

Infection vector (removable media), propagation mechanism (autorun), payload (downloaded executable)

Infection vector (email), propagation mechanism (network share), payload (keylogger)

Infection vector (phishing), propagation mechanism (macro), payload (ransomware)

Infection vector (drive-by download), propagation mechanism (exploit), payload (backdoor)

During an incident response, you find a malicious executable that, when run, copies itself to multiple network shares, modifies the Windows Registry to run at startup, and then downloads a second-stage payload from a remote server. Which set of malware components is demonstrated?

Payload, command-and-control channel, and encryption routine

Dropper, rootkit, and propagation mechanism

Infection vector, stealth technique, and dropper

Propagation mechanism, persistence mechanism, and payload

A company's employees have been receiving targeted emails that appear to come from a trusted partner. The emails contain a link to a website that looks identical to a legitimate software update page. When employees click the link, they are prompted to download a 'critical update', which is actually a Trojan. Which distribution vector and social engineering tactic are being used?

Vishing with a pretext of technical support

Spear phishing with a watering-hole component and a fake update lure

Malvertising with a fake update banner

Drive-by download from a compromised legitimate site

A user plugs a USB flash drive found in the parking lot into their workstation. The drive contains a file named 'salary.xlsx.exe' that, when opened, installs spyware. Which distribution vector and malware type are involved?

Social engineering via phone; Trojan

EC-CouncilDigital Forensics Essentials

Domain 7Objective 1

Malware Types, Components, and Distribution DFE Practice Questions (Page 2)

Part of the Malware Forensics domain, which makes up ~15% of our current practice bank.

39questions here

8free pages

3concepts

Questions 6–10

6foundation · easy
A user visits a compromised website and, without clicking anything, malicious code is downloaded and executed automatically in the background. Which malware distribution vector does this scenario describe?
Select an answer first
7application · medium
During an incident response, an analyst discovers that a USB drive inserted by an employee automatically executed a script that modified the system's autorun settings and then downloaded a payload from a remote server. Which combination of malware components is demonstrated?
Select an answer first
8application · medium
During an incident response, you find a malicious executable that, when run, copies itself to multiple network shares, modifies the Windows Registry to run at startup, and then downloads a second-stage payload from a remote server. Which set of malware components is demonstrated?
Select an answer first
9expert · hard
A company's employees have been receiving targeted emails that appear to come from a trusted partner. The emails contain a link to a website that looks identical to a legitimate software update page. When employees click the link, they are prompted to download a 'critical update', which is actually a Trojan. Which distribution vector and social engineering tactic are being used?
Select an answer first
10application · medium
A user plugs a USB flash drive found in the parking lot into their workstation. The drive contains a file named 'salary.xlsx.exe' that, when opened, installs spyware. Which distribution vector and malware type are involved?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.

Malware Types, Components, and Distribution DFE Practice Questions (Page 2)

Questions 6–10

A user visits a compromised website and, without clicking anything, malicious code is downloaded and executed automatically in the background. Which malware distribution vector does this scenario describe?

During an incident response, an analyst discovers that a USB drive inserted by an employee automatically executed a script that modified the system's autorun settings and then downloaded a payload from a remote server. Which combination of malware components is demonstrated?

During an incident response, you find a malicious executable that, when run, copies itself to multiple network shares, modifies the Windows Registry to run at startup, and then downloads a second-stage payload from a remote server. Which set of malware components is demonstrated?

A user plugs a USB flash drive found in the parking lot into their workstation. The drive contains a file named 'salary.xlsx.exe' that, when opened, installs spyware. Which distribution vector and malware type are involved?

Keep studying — Malware Forensics