True or false: Unusual slowdowns and pop-ups prove that a device is infected with malware.
3 Malware Prevention and Response Online Quiz Questions
Use this free practice quiz with 20 questions to review 3 Malware Prevention and Response, test your knowledge, and prepare for your next test or exam.
A user installs a program that looks like a legitimate utility, but it is malicious. Which malware type best describes how the program tricked the user into installing it?
- A
Trojan horse
- B
Worm
- C
Rootkit
- D
Ransomware
Malware that spreads between systems, often across a network, without someone needing to copy an infected file is a .
What malware type hides malicious activity and may help an attacker maintain privileged access?
A malicious program secretly records the keys a user types. Which specific malware type best fits this behavior?
- A
Keylogger
- B
Worm
- C
Rootkit
- D
Ransomware
Which actions are common ways malware can get onto a device? Select all that apply.
- A
Opening an unexpected email attachment
- B
Installing fake or pirated software
- C
Connecting an infected USB drive
- D
Installing an operating system update from its official source
- E
Doing everyday work with a standard account
An email appears to come from a familiar company and asks you to open a link. What is the safest way to check whether the request is genuine?
- A
Use the link in the message to check whether it is genuine.
- B
Contact the person or company through a separate, trusted method.
- C
Reply to the message and ask the sender to confirm it.
- D
Call the number provided in the message.
True or false: A single attack can use a Trojan to install spyware, so malware categories can overlap.
- A
True
- B
False
What security principle is followed when someone uses a standard account for everyday work and gives applications only the permissions they need?
When recovering from a suspected infection, restore files only from a backup believed to be .
Which practices help reduce the risk of malware infection or limit its damage? Select all that apply.
- A
Keep operating systems and applications updated.
- B
Use reputable security software and keep it updated.
- C
Use a standard account for everyday work.
- D
Get software from trusted sources and avoid unexpected attachments.
- E
Keep backups that malware cannot readily change or delete.
- F
Give every application administrator permissions.
- G
Disable security software so it does not interrupt downloads.
A device displays a ransom note and its files are inaccessible. What is the best immediate response?
- A
Pay immediately because the message says payment is the only way to recover files.
- B
Isolate the device and contact the appropriate IT or security team.
- C
Reconnect the device to see whether the files become accessible.
- D
Call the number in the ransom message for instructions.
An organization's laptop begins showing repeated pop-ups and crashes, and its security software has stopped working. Malware has not been confirmed. Explain a safe response, including what to do first, whom to notify, what actions to avoid, and how to approach recovery and account protection.
Malicious software encrypts a user's files and demands payment to restore access. Which type of malware best matches this behavior?
- A
A rootkit
- B
Ransomware
- C
Spyware
- D
A virus
Malicious software is designed to hide its activity and may help an attacker maintain privileged access. Which malware type best fits this description?
- A
A worm
- B
A Trojan horse
- C
A rootkit
- D
A keylogger
Keeping important data in backups that malware cannot readily change or delete, and periodically checking that files can be restored, can reduce the impact of an infection.
- A
True
- B
False
What account-protection control uses more than one verification factor and is especially recommended for email and administrator accounts?
What account-security control adds a verification factor beyond a password and is especially recommended for email and administrator accounts?
A team wants endpoint protection to help detect threats introduced through files and removable drives. Which setup best supports that goal?
- A
Turn off security software unless a problem has already been confirmed.
- B
Use security software only to scan files downloaded from the internet.
- C
Keep reputable security software enabled and updated, and configure it to scan files and removable drives.
- D
Rely on a browser's pop-up blocker instead of endpoint protection.
An employee suspects malware on an organization-owned laptop. Which immediate response best helps contain the risk and involve the right support?
- A
Keep it connected while checking whether coworkers see the same symptoms.
- B
Disconnect it from Wi-Fi or the wired network and promptly notify the organization's IT or security team.
- C
Delete unfamiliar files before telling anyone.
- D
Use the device to change work passwords immediately.