A malware analyst needs to determine whether a suspicious file contains encrypted or obfuscated code that might hide malicious functionality. Which static analysis technique is most appropriate for this task?

Submit the file to an online scanner

Examine the file's entropy and section headers

Check the file's digital signature

Run the file in a sandbox and monitor its behavior

After a malware infection, an organization restores systems from backups and verifies that the malware is gone. What is the NEXT step in the incident response process?

Eradicate the malware by deleting infected files

Post-incident analysis to identify the root cause and improve defenses

Notify law enforcement immediately

Contain the infection by isolating affected systems

A company wants to prevent malware from spreading through USB drives used by employees. They have already implemented endpoint antivirus. Which additional control is most effective at preventing the use of unauthorized USB devices?

Increase user awareness training

Implement device control policies to block unauthorized USB devices

Use stronger encryption on the hard drive

EC-CouncilCertified Security Specialist

Domain 3Objective 3

Malware Threats and Countermeasures ECSS Practice Questions (Page 9)

Part of the Ethical Hacking Fundamentals and Core Attacks domain, which makes up ~17% of our current practice bank.

46questions here

10free pages

6concepts

Questions 41–45

41application · medium
A malware analyst needs to determine whether a suspicious file contains encrypted or obfuscated code that might hide malicious functionality. Which static analysis technique is most appropriate for this task?
Select an answer first
42application · medium
After a malware infection, an organization restores systems from backups and verifies that the malware is gone. What is the NEXT step in the incident response process?
Select an answer first
43foundation · easy
In the incident response process for a malware infection, which step involves isolating the infected system from the network to prevent the malware from spreading?
Select an answer first
44foundation · easy
Which countermeasure is most effective in preventing malware infections that exploit known software vulnerabilities?
Select an answer first
45application · medium
A company wants to prevent malware from spreading through USB drives used by employees. They have already implemented endpoint antivirus. Which additional control is most effective at preventing the use of unauthorized USB devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Malware Threats and Countermeasures ECSS Practice Questions (Page 9)

Questions 41–45

A malware analyst needs to determine whether a suspicious file contains encrypted or obfuscated code that might hide malicious functionality. Which static analysis technique is most appropriate for this task?

After a malware infection, an organization restores systems from backups and verifies that the malware is gone. What is the NEXT step in the incident response process?

In the incident response process for a malware infection, which step involves isolating the infected system from the network to prevent the malware from spreading?

Which countermeasure is most effective in preventing malware infections that exploit known software vulnerabilities?

A company wants to prevent malware from spreading through USB drives used by employees. They have already implemented endpoint antivirus. Which additional control is most effective at preventing the use of unauthorized USB devices?

Keep studying — Ethical Hacking Fundamentals and Core Attacks