Why is regular software patching important for reducing malware infections?

It removes malware that is already present on the system

It blocks all network traffic from known malicious IP addresses

It prevents users from downloading malicious files

It fixes vulnerabilities that malware could exploit to infect systems

How do firewalls and content filtering help prevent malware infections?

By scanning all files on a host for malware signatures

By quarantining infected files and removing them from the system

By restricting unauthorized traffic and blocking malicious downloads

By monitoring system calls and blocking malicious behavior on endpoints

A company's network has been experiencing repeated infections from malware that communicates with external command-and-control (C2) servers. The security team wants to detect and block this C2 traffic at the network level. Which control is specifically designed for this purpose?

Deploy a network-based intrusion prevention system (NIPS) that inspects outbound traffic and blocks connections to known malicious IP addresses and domains.

Install antivirus on the firewall appliance and enable email scanning.

Configure the firewall to block all outbound traffic except web browsing on port 80.

Use a web security gateway to block all HTTPS traffic.

A company wants to detect and block malware that is attempting to communicate with a command-and-control server over the network. Which type of security control is most appropriate for this task?

Host-based intrusion prevention system (HIPS)

Network-based intrusion prevention system (NIPS)

Which statement best describes the primary function of an Endpoint Detection and Response (EDR) solution?

It provides continuous monitoring, threat hunting, and automated response on endpoints

It filters email attachments to block malware delivery

It blocks network traffic from known malicious IP addresses

It patches software vulnerabilities on endpoints

EC-CouncilEthical Hacking Essentials

Domain 2Objective 3

Malware Countermeasures EHE Practice Questions (Page 11)

Part of the Malware and Password Attacks domain, which makes up ~14% of our current practice bank.

58questions here

12free pages

12concepts

12 Concepts in This Objective

Malware countermeasures overview
Antivirus and anti-malware software
Host-based intrusion prevention
Network-based intrusion prevention
Firewalls and malware filtering
Patch management and vulnerability mitigation
User awareness and training
Least privilege and access control
Application whitelisting
Email and web security gateways
Endpoint detection and response (EDR)
Incident response and recovery planning

Questions 51–55

51foundation · easy
Why is regular software patching important for reducing malware infections?
Select an answer first
52foundation · easy
How do firewalls and content filtering help prevent malware infections?
Select an answer first
53application · medium
A company's network has been experiencing repeated infections from malware that communicates with external command-and-control (C2) servers. The security team wants to detect and block this C2 traffic at the network level. Which control is specifically designed for this purpose?
Select an answer first
54foundation · easy
A company wants to detect and block malware that is attempting to communicate with a command-and-control server over the network. Which type of security control is most appropriate for this task?
Select an answer first
55foundation · easy
Which statement best describes the primary function of an Endpoint Detection and Response (EDR) solution?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.