CEH Practice Question: Malware, Social Engineering and Network Attacks
A user reports that their system has become sluggish and they see pop-up advertisements even when no browser is open. Additionally, unknown processes are running in Task Manager. Which type of malware is most likely responsible?
⚠ Common exam trap
Many exam-takers confuse 'adware' with 'spyware' because both can be bundled with free software, but adware's primary symptom is unwanted ads, not data theft, which is the key differentiator in this scenario.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adware
Adware is designed to display unwanted advertisements, often in the form of pop-ups, and can degrade system performance by consuming CPU and memory resources. The presence of unknown processes in Task Manager indicates that the adware has installed additional components or bundled software that runs persistently, even when no browser is open, which is a hallmark of adware behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Worm
Why it's wrong here
Worms are self-replicating malware that spread across networks by exploiting vulnerabilities, consuming significant network bandwidth and system resources. While they can cause a system to become sluggish due to resource contention, their primary manifestation is not typically the display of numerous pop-up advertisements. Instead, they focus on propagation and often lead to network congestion or system instability, rather than ad-related issues.
- ✓
Adware
Why this is correct
Adware is specifically designed to display unwanted advertisements, often in the form of pop-ups, banners, or injected ads within web pages. This constant display and the underlying processes required to generate these ads consume significant CPU and RAM, leading directly to noticeable system sluggishness. It frequently alters browser settings, making it a direct cause for both the reported performance degradation and persistent pop-ups.
- ✗
Ransomware
Why it's wrong here
Ransomware's primary function is to encrypt a user's files, rendering them inaccessible, and then demand a ransom payment for their decryption. While the encryption process itself might temporarily consume system resources and cause sluggishness, its defining symptom is the inability to access data, often accompanied by a ransom note, not a proliferation of pop-up advertisements. The user's files become unusable, which is distinct from an ad-driven experience.
- ✗
Spyware
Why it's wrong here
Spyware is primarily designed for covertly monitoring and collecting information about a user's activities, such as keystrokes, browsing history, or personal data. While some aggressive forms of spyware may bundle adware components and display ads, its core purpose is data exfiltration, not advertisement delivery. The system sluggishness would stem more from background data collection and transmission rather than the direct overhead of displaying numerous pop-ups.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.