nerdexam
EC-CouncilEC-Council

312-49 · Question #621

312-49 Question #621: Real Exam Question with Answer & Explanation

The correct answer is A: Process Monitoring. Dynamic malware analysis involves executing the malware in a controlled environment (sandbox) and observing its runtime behavior. Process monitoring tracks which processes the malware spawns, terminates, or modifies while running — a classic dynamic technique. Malware disassemb

Submitted by kavita_s· Apr 18, 2026Malware Forensics

Question

Which of the following processes is part of the dynamic malware analysis?

Options

  • AProcess Monitoring
  • BMalware disassembly
  • CSearching for the strings
  • DFile fingerprinting

Explanation

Dynamic malware analysis involves executing the malware in a controlled environment (sandbox) and observing its runtime behavior. Process monitoring tracks which processes the malware spawns, terminates, or modifies while running — a classic dynamic technique. Malware disassembly, searching for strings, and file fingerprinting (e.g., MD5 hashing) are all static analysis techniques performed on the binary without executing it, making them distinct from dynamic analysis.

Topics

#Dynamic Malware Analysis#Malware Analysis Techniques#Process Monitoring

Community Discussion

No community discussion yet for this question.

Full 312-49 PracticeBrowse All 312-49 Questions