A web application allows users to upload profile pictures. An attacker exploits a vulnerability to upload a malicious script that executes on the server. Which countermeasure would most directly prevent this type of attack?

Require users to complete a CAPTCHA before uploading.

Use a content delivery network (CDN) to serve the uploaded files.

Validate file types by checking the file extension and MIME type on the server side.

Store uploaded files in a database as BLOBs.

What is the primary purpose of monitoring for persistence mechanisms?

To ensure that all software is up to date

To detect and remove mechanisms that allow attackers to maintain access

To encrypt data stored on endpoints

To prevent attackers from scanning the network

Which countermeasure is most effective in preventing unauthorized access during the gaining access phase?

Using a firewall to block all inbound traffic

Implementing multi-factor authentication (MFA)

Conducting regular security awareness training

A company wants to reduce the risk of a successful network attack. They have limited budget and must choose one countermeasure that addresses multiple hacking phases at once. Which option provides the broadest protection across reconnaissance, scanning, and gaining access?

Conduct monthly vulnerability scans of internal systems.

Enforce a strong password policy across all user accounts.

Deploy an endpoint detection and response (EDR) solution on all workstations.

Implement a stateful firewall that blocks all inbound traffic except required services.

A company has a distributed network with servers in multiple locations. The security team wants to implement a logging solution that can detect log tampering and provide a reliable audit trail. Which approach is the most effective?

Use a third-party cloud logging service that only stores logs for 30 days.

Use a centralized log management system that collects logs from all servers and uses cryptographic hashing to detect tampering.

Store logs locally on each server and back them up weekly.

Enable verbose logging on all servers and rely on the system administrator to review the logs manually.

EC-CouncilEthical Hacking Essentials

Domain 3Objective 5

Countermeasures Across Hacking Phases EHE Practice Questions (Page 7)

Part of the Ethical Hacking Methodology domain, which makes up ~12% of our current practice bank.

39questions here

8free pages

6concepts

Questions 31–35

31application · medium
A web application allows users to upload profile pictures. An attacker exploits a vulnerability to upload a malicious script that executes on the server. Which countermeasure would most directly prevent this type of attack?
Select an answer first
32foundation · easy
What is the primary purpose of monitoring for persistence mechanisms?
Select an answer first
33foundation · easy
Which countermeasure is most effective in preventing unauthorized access during the gaining access phase?
Select an answer first
34application · medium
A company wants to reduce the risk of a successful network attack. They have limited budget and must choose one countermeasure that addresses multiple hacking phases at once. Which option provides the broadest protection across reconnaissance, scanning, and gaining access?
Select an answer first
35expert · hard
A company has a distributed network with servers in multiple locations. The security team wants to implement a logging solution that can detect log tampering and provide a reliable audit trail. Which approach is the most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.