Malware Countermeasures EHE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security architect is designing malware defenses for a remote workforce. Employees use company laptops that connect to the internet from various locations, and also connect to the corporate network via VPN. The architect wants to block malware at both the endpoint and network levels. Which combination of controls is most appropriate?

   • ADeploy only a NIPS at the corporate network perimeter and rely on the VPN to protect remote users.
   • BUse a firewall on each laptop and a web security gateway in the cloud.
   • CDeploy HIPS on all laptops and a NIPS at the corporate network perimeter, with VPN traffic routed through the NIPS.
   • DDeploy only HIPS on laptops and disable the VPN to reduce attack surface.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which statement best describes the primary function of a host-based intrusion prevention system (HIPS)?

   • AIt filters network traffic at the perimeter to block malware
   • BIt provides a centralized dashboard for managing all network security devices
   • CIt scans email attachments for known malware signatures
   • DIt monitors and blocks malicious activities on individual endpoints
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A startup company is building its security program from scratch. They have a small budget and want to implement a balanced set of malware countermeasures that covers prevention, detection, and response. Which set of measures best achieves this balance?

   • ADeploy antivirus with real-time scanning, provide security awareness training, and create an incident response plan with regular backups.
   • BImplement application whitelisting and disable all user-installed software.
   • CPurchase an expensive EDR solution and do nothing else.
   • DConduct monthly phishing simulations and rely on users to report all suspicious emails.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   A company wants to prevent employees from accessing known malicious websites. Which security control is best suited for this task?

   • AHost-based intrusion prevention system (HIPS)
   • BWeb security gateway
   • CPatch management system
   • DAntivirus software
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company's employees have received a series of targeted spear-phishing emails that include malicious macros in attached Word documents. The email gateway filters some of them, but several have reached inboxes. The company wants to reduce the risk of users enabling macros and infecting their systems. Which measure is most effective?

   • AConfigure the email gateway to block attachments with macros and provide training that teaches users to never enable macros in unsolicited documents.
   • BSend a company-wide email advising users to be careful with attachments.
   • CInstall a host-based intrusion prevention system that only logs alerts and does not block macro execution.
   • DDisable the email gateway's attachment filtering to improve email delivery speed.
   Reveal Solution Discussion Select an answer first