A company's security policy requires blocking malware that spreads through network shares. Which malware type and attack vector should the policy focus on?

Spyware installed via removable media

Trojan delivered via email attachment

Ransomware delivered via malicious website

A security analyst is investigating a malware sample that changes its binary signature each time it infects a new host, but the core functionality remains the same. The analyst also notices that the malware uses a different encryption key for each victim. Which evasion technique is most likely being used, and what is the primary challenge it creates for signature-based detection?

Packing; the malware is compressed and encrypted, but the decryption stub is identical each time

Polymorphism; the malware's code changes with each infection, so static signatures become ineffective

Metamorphism; the malware rewrites its entire code, but the behavior changes significantly between infections

Encryption; the malware encrypts its payload with a different key, but the overall structure remains static

An analyst is reviewing a system that is suspected of being infected. The system has a new service that starts automatically, and the service's executable is packed. Which two indicators of compromise are most evident?

Unusual network traffic and registry modifications

System changes and file anomalies

Email attachments and removable media

High CPU usage and disk activity

Which of the following is an example of a file anomaly that could be an indicator of compromise?

A file's extension being changed from .txt to .exe

A file's creation date being earlier than the system installation date

A file being moved to the Recycle Bin

A file being compressed to save disk space

EC-CouncilEthical Hacking Essentials

Domain 2Objective 1

Malware Concepts, Types, and Attack Mechanisms EHE Practice Questions (Page 2)

Part of the Malware and Password Attacks domain, which makes up ~14% of our current practice bank.

43questions here

9free pages

6concepts

Questions 6–10

6application · medium
A user downloads a free media player from a third-party website. After installation, the user notices that the system is slow and that personal files are being accessed and sent to an external server. Which type of malware is most likely installed alongside the media player?
Select an answer first
7application · medium
A company's security policy requires blocking malware that spreads through network shares. Which malware type and attack vector should the policy focus on?
Select an answer first
8expert · hard
A security analyst is investigating a malware sample that changes its binary signature each time it infects a new host, but the core functionality remains the same. The analyst also notices that the malware uses a different encryption key for each victim. Which evasion technique is most likely being used, and what is the primary challenge it creates for signature-based detection?
Select an answer first
9application · medium
An analyst is reviewing a system that is suspected of being infected. The system has a new service that starts automatically, and the service's executable is packed. Which two indicators of compromise are most evident?
Select an answer first
10foundation · easy
Which of the following is an example of a file anomaly that could be an indicator of compromise?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Malware Concepts, Types, and Attack Mechanisms EHE Practice Questions (Page 2)

Questions 6–10

A user downloads a free media player from a third-party website. After installation, the user notices that the system is slow and that personal files are being accessed and sent to an external server. Which type of malware is most likely installed alongside the media player?

A company's security policy requires blocking malware that spreads through network shares. Which malware type and attack vector should the policy focus on?

An analyst is reviewing a system that is suspected of being infected. The system has a new service that starts automatically, and the service's executable is packed. Which two indicators of compromise are most evident?

Which of the following is an example of a file anomaly that could be an indicator of compromise?

Keep studying — Malware and Password Attacks