A company allows employees to use personal USB drives to transfer files between their home computers and work laptops. After several malware infections traced to these drives, management wants to reduce this risk without completely banning USB use. Which combination of controls best addresses the threat while maintaining some USB functionality?

Disable all USB ports through BIOS settings and provide cloud storage for file transfer

Install a host-based firewall on each laptop to block USB-related traffic

Enable USB write-blocking on all company laptops and require a security scan of any drive before use

Require employees to format their USB drives weekly as a preventive measure

A security analyst is investigating a server that has been running slowly. The analyst finds a process that hides itself from the process list, modifies system calls, and survives reboots. The antivirus software reports no threats. Which malware type is present, and why might the antivirus fail to detect it?

Worm; it spreads so quickly that the antivirus cannot keep up

Trojan; it disguises itself as a legitimate system process

Rootkit; it operates at a level that hides its presence from the operating system and antivirus software

Virus; it has mutated to a new signature that the antivirus does not recognize

After removing malware from a system, what is the recommended way to recover data that was corrupted or encrypted by the malware?

Use a data recovery tool to reconstruct the original files

Reinstall the operating system and hope the files are still intact

Pay the ransom demanded by the malware

Restore the data from a known-good backup

A workstation is confirmed to be infected with a Trojan that has been stealing credentials. The administrator has isolated the system from the network. What is the NEXT step in the removal and recovery process?

Reconnect the system to the network to download the latest antivirus definitions

Immediately restore from the most recent backup without scanning

Boot from a trusted recovery medium and scan the system with updated antivirus software

Delete the Trojan's executable file from the filesystem

LPI Security Essentials

Domain 3Objective 3

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 2)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

5concepts

Questions 6–10

6application · medium
A company allows employees to use personal USB drives to transfer files between their home computers and work laptops. After several malware infections traced to these drives, management wants to reduce this risk without completely banning USB use. Which combination of controls best addresses the threat while maintaining some USB functionality?
Select an answer first
7expert · hard
A security analyst is investigating a server that has been running slowly. The analyst finds a process that hides itself from the process list, modifies system calls, and survives reboots. The antivirus software reports no threats. Which malware type is present, and why might the antivirus fail to detect it?
Select an answer first
8foundation · easy
Which type of malware is designed to conceal its presence and provide an attacker with continued privileged access to a compromised system?
Select an answer first
9foundation · easy
After removing malware from a system, what is the recommended way to recover data that was corrupted or encrypted by the malware?
Select an answer first
10application · medium
A workstation is confirmed to be infected with a Trojan that has been stealing credentials. The administrator has isolated the system from the network. What is the NEXT step in the removal and recovery process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 2)

Questions 6–10

Which type of malware is designed to conceal its presence and provide an attacker with continued privileged access to a compromised system?

After removing malware from a system, what is the recommended way to recover data that was corrupted or encrypted by the malware?

A workstation is confirmed to be infected with a Trojan that has been stealing credentials. The administrator has isolated the system from the network. What is the NEXT step in the removal and recovery process?

Keep studying — 023 Device and Storage Security