300-215 · Question #39
Refer to the exhibit. An engineer analyzes an email with a malicious URL that is flagged by Cisco Secure Malware Analytics. The engineer checks the TCP streams and notices that a domain downloads an…
The correct answer is A. Evaluate the artifacts in Cisco Secure Malware Analytics. Reviewing the detailed artifacts (the downloaded PE’s SHA-256, behavioral tags, and sandbox trace) in Cisco Secure Malware Analytics confirms whether that executable is malicious-directly determining the email’s danger.
Question
Refer to the exhibit. An engineer analyzes an email with a malicious URL that is flagged by Cisco Secure Malware Analytics. The engineer checks the TCP streams and notices that a domain downloads an executable file during the sample run. Which action determines if the email is malicious?
Exhibit
Options
- AEvaluate the artifacts in Cisco Secure Malware Analytics.
- BEvaluate the file activity in Cisco Umbrella.
- CAnalyze the registry activity section in Cisco Umbrella.
- DAnalyze the activity paths in Cisco Secure Malware Analytics.
How the community answered
(33 responses)- A88% (29)
- B3% (1)
- C6% (2)
- D3% (1)
Explanation
Reviewing the detailed artifacts (the downloaded PE’s SHA-256, behavioral tags, and sandbox trace) in Cisco Secure Malware Analytics confirms whether that executable is malicious-directly determining the email’s danger.
Topics
Community Discussion
No community discussion yet for this question.