What is the first step you should take when you suspect a system is infected with malware?

Immediately reconnect to the network to update antivirus definitions

Delete all files on the system without backing up

Run a full system scan without disconnecting from the network

Isolate the system from the network to prevent further spread

A user reports that their computer is running slowly, and they notice a new program in the system tray that they did not install. The program displays advertisements and collects browsing data. Which malware type is most likely present, and what is the BEST first step for the user to take?

Rootkit; boot from a live CD and run a rootkit scanner

Worm; disconnect from the network and scan all connected drives

Adware; uninstall the unknown program and reset browser settings

Ransomware; disconnect from the network immediately

A user reports that their Linux workstation suddenly displays a full-screen message demanding a cryptocurrency payment to unlock their files. The files themselves appear intact but are renamed with a .encrypted extension. Which type of malware is most likely responsible, and what is the FIRST action the administrator should take?

Worm; immediately update the antivirus definitions

Ransomware; immediately disconnect the system from the network

Spyware; immediately run a full antivirus scan

Rootkit; immediately reboot into safe mode

A user reports that their browser's homepage has changed, and they see unwanted pop-up ads even when no browser windows are open. The system performance is normal, and no unusual processes are visible in the task manager. Which malware type is most likely present, and what is the best first detection step?

Ransomware; check for encrypted files and ransom notes

Worm; monitor network traffic for outbound connection attempts

Rootkit; boot from a live CD and compare system files to known-good hashes

Adware; review installed browser extensions and recently installed programs

LPI Security Essentials

Domain 3Objective 3

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 1)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

5concepts

Questions 1–5

1foundation · easy
What is the first step you should take when you suspect a system is infected with malware?
Select an answer first
2foundation · easy
A user receives an email that appears to be from their bank, urging them to click a link and 'verify' their account details. The link leads to a malicious website that installs malware. Which infection vector is being exploited?
Select an answer first
3application · medium
A user reports that their computer is running slowly, and they notice a new program in the system tray that they did not install. The program displays advertisements and collects browsing data. Which malware type is most likely present, and what is the BEST first step for the user to take?
Select an answer first
4application · medium
A user reports that their Linux workstation suddenly displays a full-screen message demanding a cryptocurrency payment to unlock their files. The files themselves appear intact but are renamed with a .encrypted extension. Which type of malware is most likely responsible, and what is the FIRST action the administrator should take?
Select an answer first
5application · medium
A user reports that their browser's homepage has changed, and they see unwanted pop-up ads even when no browser windows are open. The system performance is normal, and no unusual processes are visible in the task manager. Which malware type is most likely present, and what is the best first detection step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 1)

Questions 1–5

What is the first step you should take when you suspect a system is infected with malware?

A user receives an email that appears to be from their bank, urging them to click a link and 'verify' their account details. The link leads to a malicious website that installs malware. Which infection vector is being exploited?

A user reports that their computer is running slowly, and they notice a new program in the system tray that they did not install. The program displays advertisements and collects browsing data. Which malware type is most likely present, and what is the BEST first step for the user to take?

Keep studying — 023 Device and Storage Security