
EC-CouncilSOC Essentials
Domain 2Objective 5
Malware, Phishing, and Social Engineering SCE Practice Questions (Page 10)
Part of the Fundamentals of Cyber Threats domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
9concepts
Questions 46–49
- 46
An email claims your account will be suspended unless you click a link within 15 minutes. Which phishing indicator is most evident?
Select an answer first - 47
A user downloads a free game that secretly records keystrokes and sends them to an attacker. Which type of malware best describes this behavior?
Select an answer first - 48
An employee receives an email that appears to be from a well-known shipping company, stating that a package could not be delivered and asking the employee to click a link to reschedule. The email uses a generic greeting and contains a link that, when hovered over, shows an IP address instead of the company's domain. Which combination of indicators should the employee recognize as phishing?
Select an answer first - 49
An employee receives an email that appears to be from their bank, stating that their account has been locked due to suspicious activity. The email includes a link to 'verify' their account. The employee notices the sender's email address is 'support@bank-security-alerts.com' rather than the bank's official domain. What is the most likely phishing indicator?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SCE
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.