nerdexam
Cisco

200-201 · Question #309

Refer to the exhibit. Where is the executable file?

The correct answer is C. MIME. In the Cuckoo Sandbox report, the MIME type 'application/x-dosexec' is the explicit identifier that indicates the file is an executable.

Submitted by saadiq_pk· Mar 6, 2026Host-Based Analysis

Question

Refer to the exhibit. Where is the executable file?

Exhibit

200-201 question #309 exhibit

Options

  • Atags
  • Binfo
  • CMIME
  • Dname

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    89% (31)
  • D
    3% (1)

Why each option

In the Cuckoo Sandbox report, the MIME type 'application/x-dosexec' is the explicit identifier that indicates the file is an executable.

Atags

Tags are general labels for the file's characteristics, but they do not specifically identify it as an executable in the same technical manner as the MIME type.

Binfo

While the 'Info' section might contain a 'File Type' description like 'PE32 executable', the 'MIME' type provides a direct, technical classification of the file's executable nature.

CMIMECorrect

The 'MIME' field in the Cuckoo report explicitly lists 'application/x-dosexec', which is the standardized Multipurpose Internet Mail Extensions type used to classify files as MS-DOS/Windows executables.

Dname

The file 'name' (e.g., file.exe) can suggest an executable, but the MIME type offers a definitive, technical classification regardless of the file extension.

Concept tested: Cuckoo Sandbox report analysis, file type identification

Source: https://www.iana.org/assignments/media-types/media-types.xhtml

Topics

#file analysis#MIME types#file forensics

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice