An organization wants to reduce the risk of malware infections from drive-by downloads on employee workstations. They already have endpoint antivirus and a firewall. Which additional control would be most effective at preventing the initial download of malicious content from compromised websites?

Increase the frequency of full disk scans

Require users to use a different browser

Implement a web proxy with URL filtering and reputation-based blocking

Disable all browser plugins and extensions

A company wants to protect against malware that exploits unpatched vulnerabilities in third-party software. Which countermeasure is most directly effective?

Implement a rigorous patch management program

EC-CouncilCertified Security Specialist

Domain 3Objective 3

Malware Threats and Countermeasures ECSS Practice Questions (Page 2)

Part of the Ethical Hacking Fundamentals and Core Attacks domain, which makes up ~17% of our current practice bank.

46questions here

10free pages

6concepts

Questions 6–10

6application · medium
An organization wants to reduce the risk of malware infections from drive-by downloads on employee workstations. They already have endpoint antivirus and a firewall. Which additional control would be most effective at preventing the initial download of malicious content from compromised websites?
Select an answer first
7foundation · easy
A security analyst discovers a file that, when executed, replicates itself across network shares and spreads to other systems without requiring user interaction. Which type of malware does this describe?
Select an answer first
8foundation · easy
Which malware infection vector involves a website that automatically exploits vulnerabilities in a visitor's browser or plugins to install malware?
Select an answer first
9foundation · easy
Which malware analysis technique involves examining the code and structure of a malicious file without executing it?
Select an answer first
10application · medium
A company wants to protect against malware that exploits unpatched vulnerabilities in third-party software. Which countermeasure is most directly effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Malware Threats and Countermeasures ECSS Practice Questions (Page 2)

Questions 6–10

An organization wants to reduce the risk of malware infections from drive-by downloads on employee workstations. They already have endpoint antivirus and a firewall. Which additional control would be most effective at preventing the initial download of malicious content from compromised websites?

A security analyst discovers a file that, when executed, replicates itself across network shares and spreads to other systems without requiring user interaction. Which type of malware does this describe?

Which malware infection vector involves a website that automatically exploits vulnerabilities in a visitor's browser or plugins to install malware?

Which malware analysis technique involves examining the code and structure of a malicious file without executing it?

A company wants to protect against malware that exploits unpatched vulnerabilities in third-party software. Which countermeasure is most directly effective?

Keep studying — Ethical Hacking Fundamentals and Core Attacks