Which technique is used to evade detection from security products by executing arbitrary code in the address space of a separate live operation?

The correct answer is A. process injection. Process injection is a tactic where malicious code is inserted into the memory space of another process, enabling it to run with the privileges and context of a legitimate application. The Cisco study guide explains that this method allows malware to "hide in plain sight"…

Submitted by ravi_2018· Mar 6, 2026Cloud Security Risks & Threat Mitigation

Question

Options

Aprocess injection
Bprivilege escalation
CGPO modification
Dtoken manipulation

How the community answered

(30 responses)

A
90% (27)
B
7% (2)
C
3% (1)

Explanation

Process injection is a tactic where malicious code is inserted into the memory space of another process, enabling it to run with the privileges and context of a legitimate application. The Cisco study guide explains that this method allows malware to "hide in plain sight" within trusted processes and evade endpoint detection and response (EDR) tools. It specifically notes: "Process injection techniques allow malware to execute within the memory space of a legitimate process, avoiding detection and taking advantage of the process's

Topics

#Process injection#Malware techniques#Evasion#Operating system security

Community Discussion

No community discussion yet for this question.

Full 300-215 Practice