023.3 Malware (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 6)

Questions 26–29

1. 26expert · hard

   A company's network was infected with malware that spread rapidly between Windows workstations using the SMB protocol. The malware exploited a vulnerability that had a patch available for three months, but the company had not applied it. Which combination of factors MOST directly contributed to the outbreak?

   • AUnpatched systems and lack of network segmentation
   • BWeak passwords and lack of multi-factor authentication
   • COutdated antivirus definitions and lack of endpoint protection
   • DUser error and lack of security awareness training
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An employee at a small company receives an email from their manager with an attachment named 'invoice_2024.pdf.exe'. The employee opens it, and shortly afterward the IT team detects unusual outbound network traffic from that workstation. Which infection vector and prevention control are most directly relevant to this incident?

   • ANetwork propagation; segment the network into VLANs
   • BEmail attachment; implement a policy to block executable files in email and provide user awareness training
   • CMalicious website; enable the browser's pop-up blocker
   • DRemovable media; disable USB ports via group policy
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A Linux server's performance has degraded over several days. The administrator notices high CPU usage from a process named 'kworkerds', which is not a standard kernel worker thread. The process has modified several system binaries and survives reboots. Which malware type and detection method best match this situation?

   • AWorm; monitor network connections for outbound scanning activity
   • BRootkit; use behavioral analysis and compare file hashes against known-good baselines
   • CAdware; check browser extensions and remove suspicious add-ons
   • DVirus; run a standard signature-based antivirus scan
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization wants to prevent malware infections from email attachments. They already have a spam filter in place. Which additional control is MOST effective for this specific threat?

   • AIncrease the frequency of antivirus scans on email servers
   • BBlock executable attachments at the email gateway and provide user awareness training
   • CRequire users to change their email passwords every 60 days
   • DDisable email attachments entirely for all users
   Reveal Solution Discussion Select an answer first