Malware Propagation Techniques and Indicators EHE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a common method that malware uses to propagate from one system to another?

   • ABlocking outbound network traffic
   • BSending phishing emails with malicious attachments
   • CEncrypting the hard drive with BitLocker
   • DAutomatically patching the operating system
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   A user reports that their computer displays frequent unexpected pop-up advertisements even when no browser is open. This is an example of which type of malware indicator?

   • ANetwork indicator
   • BSystem-level indicator
   • CBehavioral indicator
   • DFile modification indicator
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   A user downloads a free PDF converter from a website, but the program also installs adware. This is an example of which malware propagation technique?

   • AWorm exploiting a network service
   • BTrojan disguised as legitimate software
   • CDrive-by download
   • DEmail attachment
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A user reports that after plugging a USB flash drive into a company laptop, the system became sluggish and several new background processes appeared. The user says the drive was given by a vendor at a trade show. Which action should the security team take FIRST to contain the potential infection?

   • ADisable the laptop's wireless adapter and continue normal work while IT investigates the USB drive in a sandbox.
   • BRun a full antivirus scan on the laptop while it remains connected to the network to detect any active infections.
   • CImmediately reformat the USB drive and reimage the laptop to ensure the malware is completely removed.
   • DDisconnect the laptop from the network and isolate it, then scan the USB drive and the laptop with updated anti-malware software.
   Reveal Solution Discussion Select an answer first
6. 30application · easy

   A small business has a single file server that is shared by all employees. One employee opens an email attachment that launches a script, which then copies itself to the file server's public share. Other employees who open files from that share become infected. Which propagation vector and technique are being used?

   • ANetwork vulnerability as the vector, with the malware exploiting an unpatched service.
   • BRemovable media as the vector, with the malware spreading through USB drives.
   • CDrive-by download as the vector, with the malware spreading through malicious websites.
   • DEmail attachment as the vector, with the malware spreading through network shares as a technique.
   Reveal Solution Discussion Select an answer first