An analyst has a malware sample that is heavily obfuscated and uses anti-analysis techniques to evade sandboxes. The analyst needs to understand the malware's command-and-control (C2) communication. Which approach would be MOST effective?

Perform dynamic analysis with a custom sandbox that simulates realistic network services and delays

Submit the sample to a public online sandbox

Use static analysis to deobfuscate the entire binary manually

Run the sample on a physical machine connected to the corporate network

A small business has had three malware infections in the past month, all traced to employees opening email attachments from unknown senders. The company already uses a signature-based antivirus product on all endpoints. Which additional countermeasure would be most effective in reducing this specific infection vector?

Enable macro security settings in Microsoft Office

Deploy a next-generation firewall with intrusion prevention

Increase the frequency of antivirus signature updates

Implement a security awareness training program focused on phishing and email hygiene

An organization's users frequently receive spear-phishing emails that contain malicious attachments. The current antivirus detects some but not all of these attachments. The organization wants to reduce the risk without blocking legitimate email. Which control is most effective?

Implement an email gateway with sandboxing and attachment analysis

Increase antivirus signature update frequency

EC-CouncilCertified Security Specialist

Domain 3Objective 3

Malware Threats and Countermeasures ECSS Practice Questions (Page 6)

Part of the Ethical Hacking Fundamentals and Core Attacks domain, which makes up ~17% of our current practice bank.

46questions here

10free pages

6concepts

Questions 26–30

26foundation · easy
Which malware detection approach monitors the actions of programs in real time, such as attempts to modify system files or access sensitive data, to identify malicious behavior?
Select an answer first
27application · medium
A user reports that a file named 'Invoice_2024.pdf.exe' arrived as an email attachment from an unknown sender. When opened, it encrypted the user's documents and displayed a ransom note. Which two malware categories best describe this threat?
Select an answer first
28expert · hard
An analyst has a malware sample that is heavily obfuscated and uses anti-analysis techniques to evade sandboxes. The analyst needs to understand the malware's command-and-control (C2) communication. Which approach would be MOST effective?
Select an answer first
29application · medium
A small business has had three malware infections in the past month, all traced to employees opening email attachments from unknown senders. The company already uses a signature-based antivirus product on all endpoints. Which additional countermeasure would be most effective in reducing this specific infection vector?
Select an answer first
30expert · hard
An organization's users frequently receive spear-phishing emails that contain malicious attachments. The current antivirus detects some but not all of these attachments. The organization wants to reduce the risk without blocking legitimate email. Which control is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Malware Threats and Countermeasures ECSS Practice Questions (Page 6)

Questions 26–30

Which malware detection approach monitors the actions of programs in real time, such as attempts to modify system files or access sensitive data, to identify malicious behavior?

A user reports that a file named 'Invoice_2024.pdf.exe' arrived as an email attachment from an unknown sender. When opened, it encrypted the user's documents and displayed a ransom note. Which two malware categories best describe this threat?

An analyst has a malware sample that is heavily obfuscated and uses anti-analysis techniques to evade sandboxes. The analyst needs to understand the malware's command-and-control (C2) communication. Which approach would be MOST effective?

An organization's users frequently receive spear-phishing emails that contain malicious attachments. The current antivirus detects some but not all of these attachments. The organization wants to reduce the risk without blocking legitimate email. Which control is most effective?

Keep studying — Ethical Hacking Fundamentals and Core Attacks