A company is experiencing repeated malware infections from drive-by downloads on employee workstations. They have antivirus software, but infections still occur. The security team wants to reduce the risk without affecting productivity. Which approach is the most effective?

Increase the frequency of antivirus signature updates

Implement a web filter that blocks access to known malicious and high-risk categories

Disable JavaScript in the browser for all users

Require users to run a manual scan every day

Which of the following is a common indicator of a phishing email?

The sender's email address is similar to a legitimate one but with slight misspellings

The email is from a colleague you know

The email contains a link to a well-known website

The email is sent during business hours

A company wants to reduce the risk of social engineering attacks, but they have a limited budget and cannot afford extensive training. Which single measure is most cost-effective?

Require employees to wear ID badges at all times

Implement a simple verification process for sensitive requests

Post security awareness posters in common areas

EC-CouncilSOC Essentials

Domain 2Objective 5

Malware, Phishing, and Social Engineering SCE Practice Questions (Page 8)

Part of the Fundamentals of Cyber Threats domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

9concepts

Questions 36–40

36foundation · easy
An attacker calls an employee pretending to be from the IT department and asks for their password to 'fix a problem'. This social engineering attack is best classified as:
Select an answer first
37expert · hard
A company is experiencing repeated malware infections from drive-by downloads on employee workstations. They have antivirus software, but infections still occur. The security team wants to reduce the risk without affecting productivity. Which approach is the most effective?
Select an answer first
38foundation · easy
An attacker sends an email stating that a limited number of free tickets are available and the user must act now to claim one. Which social engineering principle is being used?
Select an answer first
39foundation · easy
Which of the following is a common indicator of a phishing email?
Select an answer first
40expert · hard
A company wants to reduce the risk of social engineering attacks, but they have a limited budget and cannot afford extensive training. Which single measure is most cost-effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Malware, Phishing, and Social Engineering SCE Practice Questions (Page 8)

Questions 36–40

An attacker calls an employee pretending to be from the IT department and asks for their password to 'fix a problem'. This social engineering attack is best classified as:

A company is experiencing repeated malware infections from drive-by downloads on employee workstations. They have antivirus software, but infections still occur. The security team wants to reduce the risk without affecting productivity. Which approach is the most effective?

An attacker sends an email stating that a limited number of free tickets are available and the user must act now to claim one. Which social engineering principle is being used?

Which of the following is a common indicator of a phishing email?

A company wants to reduce the risk of social engineering attacks, but they have a limited budget and cannot afford extensive training. Which single measure is most cost-effective?

Keep studying — Fundamentals of Cyber Threats