An analyst is investigating a malware sample that, when executed, creates a copy of itself on every writable network share it can access and also sends a copy to all email contacts found on the system. Which malware type and propagation mechanism are demonstrated?

Worm with self-propagation via network shares and email

Ransomware with an encryption payload

Spyware with a keylogging payload

Trojan with a payload that steals credentials

A company has a policy that blocks all email attachments. An attacker instead embeds a malicious link in an email that leads to a website hosting an exploit kit. When an employee clicks the link, the exploit kit silently installs a backdoor without any user interaction beyond the click. Which distribution vector and malware component are demonstrated?

Drive-by download via a malicious link, with an exploit kit delivering a payload

Removable media with an autorun payload

Social engineering via phone call with a Trojan payload

Email attachment with a macro-based payload

An employee in the finance department receives an email that appears to be from the CEO, urgently requesting that the employee open an attached invoice and process a payment. The attachment contains a Trojan. Which distribution vector and social engineering tactic are being used?

Watering-hole attack on a frequently visited site

Email attachment with a pretext of authority and urgency

Drive-by download from a compromised website

Removable media left in the parking lot

EC-CouncilDigital Forensics Essentials

Domain 7Objective 1

Malware Types, Components, and Distribution DFE Practice Questions (Page 8)

Part of the Malware Forensics domain, which makes up ~15% of our current practice bank.

39questions here

8free pages

3concepts

Questions 36–39

36application · medium
An analyst is investigating a malware sample that, when executed, creates a copy of itself on every writable network share it can access and also sends a copy to all email contacts found on the system. Which malware type and propagation mechanism are demonstrated?
Select an answer first
37foundation · easy
An attacker sends a phishing email that appears to be from a trusted bank, urging the recipient to click a link that downloads malware. Which malware distribution vector is primarily being used?
Select an answer first
38expert · hard
A company has a policy that blocks all email attachments. An attacker instead embeds a malicious link in an email that leads to a website hosting an exploit kit. When an employee clicks the link, the exploit kit silently installs a backdoor without any user interaction beyond the click. Which distribution vector and malware component are demonstrated?
Select an answer first
39application · medium
An employee in the finance department receives an email that appears to be from the CEO, urgently requesting that the employee open an attached invoice and process a payment. The attachment contains a Trojan. Which distribution vector and social engineering tactic are being used?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.

Malware Types, Components, and Distribution DFE Practice Questions (Page 8)

Questions 36–39

An analyst is investigating a malware sample that, when executed, creates a copy of itself on every writable network share it can access and also sends a copy to all email contacts found on the system. Which malware type and propagation mechanism are demonstrated?

An attacker sends a phishing email that appears to be from a trusted bank, urging the recipient to click a link that downloads malware. Which malware distribution vector is primarily being used?

An employee in the finance department receives an email that appears to be from the CEO, urgently requesting that the employee open an attached invoice and process a payment. The attachment contains a Trojan. Which distribution vector and social engineering tactic are being used?

Keep studying — Malware Forensics