A company is implementing a new access control policy. They want to prevent an attacker who has stolen a user's password from accessing sensitive systems. Which control is most effective for this specific threat?

Set passwords to expire every 30 days.

Implement multi-factor authentication (MFA) for all sensitive systems.

Use a password manager to store all passwords.

Enforce a password policy that requires 15-character passwords.

Why is patch management an important countermeasure for the gaining access phase?

It closes vulnerabilities that attackers could exploit to gain unauthorized access

It detects and removes backdoors installed by attackers

It prevents attackers from covering their tracks

It reduces the amount of information available during reconnaissance

Which countermeasure is most directly aimed at mitigating the 'maintaining access' phase of an attack?

Enforcing strong password policies

Using a firewall to block unauthorized inbound connections

Implementing endpoint detection and response (EDR) to detect backdoors and persistence mechanisms

Conducting regular security awareness training

A company is concerned about attackers using search engines and public databases to find information about their network infrastructure, such as server names, IP addresses, and software versions. Which countermeasure is the most effective to reduce this type of information exposure?

Use a different domain name for the public website.

Implement a firewall rule that blocks search engine crawlers from accessing the website.

Encrypt all web traffic with TLS.

Remove or obfuscate infrastructure details from public-facing documents, DNS records, and website metadata.

A security administrator is looking for ways to detect backdoors that may have been installed on servers. The administrator wants to use a method that can identify both known and unknown backdoors. Which approach is the most effective?

Perform a weekly manual review of all running processes.

Disable all unnecessary services on the servers.

Use a host-based intrusion detection system (HIDS) that monitors system calls and file integrity.

Use a network-based intrusion detection system (NIDS) to monitor traffic for backdoor communication.

EC-CouncilEthical Hacking Essentials

Domain 3Objective 5

Countermeasures Across Hacking Phases EHE Practice Questions (Page 5)

Part of the Ethical Hacking Methodology domain, which makes up ~12% of our current practice bank.

39questions here

8free pages

6concepts

Questions 21–25

21expert · hard
A company is implementing a new access control policy. They want to prevent an attacker who has stolen a user's password from accessing sensitive systems. Which control is most effective for this specific threat?
Select an answer first
22foundation · easy
Why is patch management an important countermeasure for the gaining access phase?
Select an answer first
23foundation · easy
Which countermeasure is most directly aimed at mitigating the 'maintaining access' phase of an attack?
Select an answer first
24application · medium
A company is concerned about attackers using search engines and public databases to find information about their network infrastructure, such as server names, IP addresses, and software versions. Which countermeasure is the most effective to reduce this type of information exposure?
Select an answer first
25application · medium
A security administrator is looking for ways to detect backdoors that may have been installed on servers. The administrator wants to use a method that can identify both known and unknown backdoors. Which approach is the most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.