A hospital's IT team wants to protect clinical workstations from malware that spreads via USB drives and attempts to modify system files. They already have antivirus with up-to-date signatures. Which additional control would most directly block unauthorized file modifications and prevent the malware from executing from removable media?

Enable Windows Defender's cloud-delivered protection and automatic sample submission.

Deploy a HIPS agent configured to block writes to protected system directories and prevent execution from removable drives.

Configure the local firewall to block inbound connections on all ports except 443.

Apply the principle of least privilege by removing local administrator rights from clinical users.

A security administrator wants to prevent malware from modifying critical system files on a specific server. Which type of control is best suited for this task?

Host-based intrusion prevention system (HIPS)

Network-based intrusion prevention system (NIPS)

A university's IT team discovered that a worm spread across campus because a known vulnerability in a popular PDF reader was unpatched on many faculty laptops. The vulnerability had a patch available for three months. The team wants to prevent a recurrence. Which combination of actions should they take?

Increase the frequency of antivirus scans on all laptops to twice daily.

Send a one-time email to all faculty reminding them to update their PDF reader.

Implement a centralized patch management system that pushes updates to all managed devices and verify compliance monthly.

Block all PDF files at the email gateway and web gateway.

EC-CouncilEthical Hacking Essentials

Domain 2Objective 3

Malware Countermeasures EHE Practice Questions (Page 1)

Part of the Malware and Password Attacks domain, which makes up ~14% of our current practice bank.

58questions here

12free pages

12concepts

12 Concepts in This Objective

Malware countermeasures overview
Antivirus and anti-malware software
Host-based intrusion prevention
Network-based intrusion prevention
Firewalls and malware filtering
Patch management and vulnerability mitigation
User awareness and training
Least privilege and access control
Application whitelisting
Email and web security gateways
Endpoint detection and response (EDR)
Incident response and recovery planning

Questions 1–5

1application · medium
A hospital's IT team wants to protect clinical workstations from malware that spreads via USB drives and attempts to modify system files. They already have antivirus with up-to-date signatures. Which additional control would most directly block unauthorized file modifications and prevent the malware from executing from removable media?
Select an answer first
2foundation · easy
A security administrator wants to prevent malware from modifying critical system files on a specific server. Which type of control is best suited for this task?
Select an answer first
3application · medium
A university's IT team discovered that a worm spread across campus because a known vulnerability in a popular PDF reader was unpatched on many faculty laptops. The vulnerability had a patch available for three months. The team wants to prevent a recurrence. Which combination of actions should they take?
Select an answer first
4foundation · easy
An antivirus product uses a database of known malware signatures to identify infections. Which detection method is this an example of?
Select an answer first
5foundation · easy
An organization wants to prevent employees from running unauthorized software on their workstations. Which control is most effective for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Malware Countermeasures EHE Practice Questions (Page 1)

Questions 1–5

A security administrator wants to prevent malware from modifying critical system files on a specific server. Which type of control is best suited for this task?

An antivirus product uses a database of known malware signatures to identify infections. Which detection method is this an example of?

An organization wants to prevent employees from running unauthorized software on their workstations. Which control is most effective for this purpose?

Keep studying — Malware and Password Attacks