A system administrator suspects a malware infection on a server but the antivirus scan reports no threats. The server is exhibiting unusual outbound network connections and high CPU usage. The administrator needs to confirm the infection and identify the malware. Which approach is MOST effective?

Run a second antivirus scan with a different vendor's product

Perform behavioral analysis by monitoring process activity, network connections, and file system changes over time

Check the system event logs for error messages related to the high CPU usage

Reinstall the operating system immediately to remove any hidden malware

Which of the following is a common symptom that may indicate a malware infection on a system?

The system shuts down cleanly every time

All files are accessible without errors

The system runs faster than usual

Unexpected pop-up advertisements appear

A company has a mix of Windows and Linux workstations. Recently, several Windows machines were infected with malware that spreads via USB drives. The Linux machines have not been affected. Management wants to reduce the risk of USB-borne malware across the entire environment. Which approach is MOST effective while minimizing disruption?

Require all employees to use cloud storage instead of USB drives

Deploy endpoint protection with USB device control on all workstations, blocking unauthorized devices and scanning allowed ones

Disable USB ports on all Windows machines only, since Linux is not affected

Implement a group policy to disable AutoRun on all Windows machines

LPI Security Essentials

Domain 3Objective 3

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 5)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

5concepts

Questions 21–25

21foundation · easy
Which of the following is a common malware infection vector that involves the use of USB drives or external hard disks?
Select an answer first
22expert · hard
A system administrator suspects a malware infection on a server but the antivirus scan reports no threats. The server is exhibiting unusual outbound network connections and high CPU usage. The administrator needs to confirm the infection and identify the malware. Which approach is MOST effective?
Select an answer first
23foundation · easy
Which of the following is a common symptom that may indicate a malware infection on a system?
Select an answer first
24expert · hard
A company has a mix of Windows and Linux workstations. Recently, several Windows machines were infected with malware that spreads via USB drives. The Linux machines have not been affected. Management wants to reduce the risk of USB-borne malware across the entire environment. Which approach is MOST effective while minimizing disruption?
Select an answer first
25foundation · easy
Which method of malware detection involves monitoring the behavior of programs and flagging actions that are unusual or malicious, rather than relying on known signatures?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 5)

Questions 21–25

Which of the following is a common malware infection vector that involves the use of USB drives or external hard disks?

A system administrator suspects a malware infection on a server but the antivirus scan reports no threats. The server is exhibiting unusual outbound network connections and high CPU usage. The administrator needs to confirm the infection and identify the malware. Which approach is MOST effective?

Which of the following is a common symptom that may indicate a malware infection on a system?

Which method of malware detection involves monitoring the behavior of programs and flagging actions that are unusual or malicious, rather than relying on known signatures?

Keep studying — 023 Device and Storage Security