A company's incident response team has just confirmed a malware infection on a critical file server. The malware is actively encrypting files. Management wants to restore normal operations as quickly as possible, but the team is unsure whether the malware has spread to other servers. Which action should the team take first to balance containment and business continuity?

Run a full antivirus scan on the server and wait for the results before taking any other action.

Disconnect the server's power and then turn it back on after a few minutes.

Restore the server from the most recent backup immediately without isolating it.

Isolate the infected server from the network immediately to stop the spread, then investigate the scope before restoring from backups.

How does security awareness training help users avoid malware infections?

It teaches users to recognize and avoid phishing and social engineering attempts

It scans all email attachments for malware before they are opened

It automatically blocks malicious websites and downloads

It patches software vulnerabilities on user workstations

A small business has a single internet connection and a basic router. They want to reduce the risk of malware infections from malicious websites and unauthorized remote access attempts. They cannot afford a dedicated security appliance. Which configuration should they implement on their existing router?

Set the router to allow all inbound traffic and use a complex Wi-Fi password.

Enable the router's stateful firewall, block inbound connections that are not part of established sessions, and configure content filtering to block known malicious domains.

Disable the firewall and rely on the antivirus on each computer.

Upgrade the router's firmware and then ignore all other settings.

EC-CouncilEthical Hacking Essentials

Domain 2Objective 3

Malware Countermeasures EHE Practice Questions (Page 12)

Part of the Malware and Password Attacks domain, which makes up ~14% of our current practice bank.

58questions here

12free pages

12concepts

12 Concepts in This Objective

Malware countermeasures overview
Antivirus and anti-malware software
Host-based intrusion prevention
Network-based intrusion prevention
Firewalls and malware filtering
Patch management and vulnerability mitigation
User awareness and training
Least privilege and access control
Application whitelisting
Email and web security gateways
Endpoint detection and response (EDR)
Incident response and recovery planning

Questions 56–58

56expert · hard
A company's incident response team has just confirmed a malware infection on a critical file server. The malware is actively encrypting files. Management wants to restore normal operations as quickly as possible, but the team is unsure whether the malware has spread to other servers. Which action should the team take first to balance containment and business continuity?
Select an answer first
57foundation · easy
How does security awareness training help users avoid malware infections?
Select an answer first
58application · medium
A small business has a single internet connection and a basic router. They want to reduce the risk of malware infections from malicious websites and unauthorized remote access attempts. They cannot afford a dedicated security appliance. Which configuration should they implement on their existing router?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Malware Countermeasures EHE Practice Questions (Page 12)

Questions 56–58

How does security awareness training help users avoid malware infections?

Keep studying — Malware and Password Attacks