A malware analyst is examining a sample that appears to have a different hash each time it is downloaded from a malware repository. The analyst also notices that the sample uses a different decryption key for each download, but the decryption routine is the same. Which obfuscation technique is being used, and what is the primary challenge for detection?

Metamorphism; the entire code is rewritten, making behavior analysis impossible

Polymorphism; the changing hash and decryption key defeat static signatures

Encryption; the malware is encrypted, but the key is static

Packing; the decryption routine is static, making it easy to detect

Which of the following is a common indicator of compromise (IoC) that might signal a malware infection?

Unusual outbound network traffic to a known malicious IP address

User changing their password after a policy reminder

Regular system updates being installed

Increased disk space due to new software installation

A user reports that after plugging a USB flash drive into a company laptop, the system began running slowly and showing unusual pop-up ads. The security team finds an executable file on the drive that was not there before. Which malware type and attack vector combination best describes this situation?

Spyware delivered via malicious website

Worm spreading over the network via SMB shares

Ransomware delivered via email attachment

Trojan delivered via removable media

EC-CouncilEthical Hacking Essentials

Domain 2Objective 1

Malware Concepts, Types, and Attack Mechanisms EHE Practice Questions (Page 1)

Part of the Malware and Password Attacks domain, which makes up ~14% of our current practice bank.

43questions here

9free pages

6concepts

Questions 1–5

1foundation · easy
Which type of malware is designed to spread from one system to another without requiring user interaction, often exploiting network vulnerabilities?
Select an answer first
2expert · hard
A malware analyst is examining a sample that appears to have a different hash each time it is downloaded from a malware repository. The analyst also notices that the sample uses a different decryption key for each download, but the decryption routine is the same. Which obfuscation technique is being used, and what is the primary challenge for detection?
Select an answer first
3application · medium
A system administrator discovers that a server has been infected with malware that hides its processes from the task manager and modifies system calls to conceal its presence. Which type of malware is most likely responsible?
Select an answer first
4foundation · easy
Which of the following is a common indicator of compromise (IoC) that might signal a malware infection?
Select an answer first
5application · medium
A user reports that after plugging a USB flash drive into a company laptop, the system began running slowly and showing unusual pop-up ads. The security team finds an executable file on the drive that was not there before. Which malware type and attack vector combination best describes this situation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Malware Concepts, Types, and Attack Mechanisms EHE Practice Questions (Page 1)

Questions 1–5

Which type of malware is designed to spread from one system to another without requiring user interaction, often exploiting network vulnerabilities?

A system administrator discovers that a server has been infected with malware that hides its processes from the task manager and modifies system calls to conceal its presence. Which type of malware is most likely responsible?

Which of the following is a common indicator of compromise (IoC) that might signal a malware infection?

Keep studying — Malware and Password Attacks