A user receives a phone call from someone claiming to be from IT support, asking the user to 'verify their credentials' by visiting a specific website and entering their username and password. The user complies, and later the account is used to send phishing emails. Which infection vector and prevention control are most relevant?

Malicious website; enable the browser's pop-up blocker

Email attachment; deploy an email filtering gateway

Removable media; disable USB ports on all workstations

Social engineering; implement multi-factor authentication and conduct security awareness training

A user's laptop is infected with a virus that has corrupted several system files. The administrator has isolated the system and scanned it with antivirus software, which removed the virus. What is the NEXT step in the recovery process?

Reconnect the system to the network immediately to verify connectivity

Delete all user data and reinstall the operating system

Run a second antivirus scan to confirm the virus is gone

Restore corrupted system files from a trusted backup or reinstall the affected components

A security analyst is examining a compromised system. The analyst finds a file that appears to be a legitimate system utility, but it has been replaced with a malicious version that captures keystrokes and sends them to a remote server. The malicious file does not replicate itself and requires the user to run it. Which malware type is this, and what is the MOST likely infection vector?

Trojan; social engineering or a malicious download

Virus; attaching itself to other executable files

Worm; network propagation through an unpatched vulnerability

Rootkit; hiding its presence from the operating system

A company wants to reduce the risk of malware infections from users visiting compromised websites. They already have a firewall and antivirus software deployed. Which additional control is MOST effective for this specific threat?

Disable the Windows Firewall to improve network performance

Increase the frequency of full antivirus scans to daily

Deploy a web filter that blocks access to known malicious domains and categories

Require users to change their passwords every 30 days

LPI Security Essentials

Domain 3Objective 3

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 3)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

5concepts

Questions 11–15

11application · medium
A user receives a phone call from someone claiming to be from IT support, asking the user to 'verify their credentials' by visiting a specific website and entering their username and password. The user complies, and later the account is used to send phishing emails. Which infection vector and prevention control are most relevant?
Select an answer first
12application · medium
A user's laptop is infected with a virus that has corrupted several system files. The administrator has isolated the system and scanned it with antivirus software, which removed the virus. What is the NEXT step in the recovery process?
Select an answer first
13foundation · easy
Which type of malware is characterized by self-replication and the ability to spread to other systems without requiring a host file or user action?
Select an answer first
14expert · hard
A security analyst is examining a compromised system. The analyst finds a file that appears to be a legitimate system utility, but it has been replaced with a malicious version that captures keystrokes and sends them to a remote server. The malicious file does not replicate itself and requires the user to run it. Which malware type is this, and what is the MOST likely infection vector?
Select an answer first
15application · medium
A company wants to reduce the risk of malware infections from users visiting compromised websites. They already have a firewall and antivirus software deployed. Which additional control is MOST effective for this specific threat?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 3)

Questions 11–15

A user's laptop is infected with a virus that has corrupted several system files. The administrator has isolated the system and scanned it with antivirus software, which removed the virus. What is the NEXT step in the recovery process?

Which type of malware is characterized by self-replication and the ability to spread to other systems without requiring a host file or user action?

A company wants to reduce the risk of malware infections from users visiting compromised websites. They already have a firewall and antivirus software deployed. Which additional control is MOST effective for this specific threat?

Keep studying — 023 Device and Storage Security