Malware, Phishing, and Social Engineering SCE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security team is investigating a malware outbreak. The malware was delivered via an exploit kit that targeted a vulnerability in a web browser plugin. The malware then downloaded a Trojan that installed a backdoor. Which combination of delivery mechanisms and malware types is present?

   • ADrive-by download and malicious attachment; Trojan and virus
   • BExploit kit and drive-by download; Trojan and backdoor
   • CMalicious attachment and exploit kit; virus and worm
   • DPhishing attachment and worm; ransomware and spyware
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security analyst discovers a file that appears to be a legitimate PDF but, when opened, executes a script that downloads additional malware. The file was sent as an email attachment. Which type of malware is this file?

   • ATrojan
   • BRansomware
   • CWorm
   • DVirus
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to reduce the risk of malware infections from email attachments. They have already deployed antivirus software on all endpoints. Which additional measure is most effective in preventing infections from malicious attachments?

   • AImplement email filtering that blocks executable attachments and quarantines suspicious files
   • BDisable the antivirus software to improve system performance
   • CRequire users to change their passwords weekly
   • DTrain users to forward all email attachments to IT for manual review
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company has experienced several tailgating incidents at the main entrance. They want to reduce the risk without significantly slowing down employee entry. Which control is most effective?

   • APost a sign that says 'No Tailgating'
   • BRemove the badge reader and rely on employee recognition
   • CIncrease the number of security guards at the entrance
   • DInstall a turnstile with badge authentication
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security team wants to reduce the risk of tailgating at a facility with a badge-controlled entrance. Which control is most effective?

   • AIncrease the number of security guards at the entrance.
   • BInstall a mantraps with two interlocking doors that require one badge swipe per person.
   • CUse a single door with a keypad that requires a PIN.
   • DPost a sign reminding employees not to hold the door for others.
   Reveal Solution Discussion Select an answer first