A user has just reported that he downloaded a file from a prospective client using IM. The user indicates that the file was called account.doc. The system has been behaving unusually since he downloaded the file. What is the most likely event that occurred?

The CEH exam is a 125-question multiple-choice exam. Candidates have four hours to complete the CEH exam.
Common CEH exam topics covered include: hacking methodologies, scanning methodologies, port scan types, and expected return responses. 
Knowing how to work with tools such as Nmap, Wireshark, Snort, OpenSSL, Netstat, and Hping will be handy.