Symantec
250-315 · Question #184
Acrobat Reader is being targeted by a threat using process injection. Which feature of SONAR is sandboxing Acroread32.exe so that the threat is prevented from dropping its payload?
The correct answer is B. Suspicious Behavior Detection. See the full explanation below for the reasoning.
Question
Acrobat Reader is being targeted by a threat using process injection. Which feature of SONAR is sandboxing Acroread32.exe so that the threat is prevented from dropping its payload?
Options
- ACommercial Application Detection
- BSuspicious Behavior Detection
- CSystem Change Events
- DSignature Based Detection
How the community answered
(33 responses)- A6% (2)
- B79% (26)
- C12% (4)
- D3% (1)
Community Discussion
No community discussion yet for this question.