312-49 · Question #621
312-49 Question #621: Real Exam Question with Answer & Explanation
The correct answer is A: Process Monitoring. Dynamic malware analysis involves executing the malware in a controlled environment (sandbox) and observing its runtime behavior. Process monitoring tracks which processes the malware spawns, terminates, or modifies while running — a classic dynamic technique. Malware disassemb
Question
Which of the following processes is part of the dynamic malware analysis?
Options
- AProcess Monitoring
- BMalware disassembly
- CSearching for the strings
- DFile fingerprinting
Explanation
Dynamic malware analysis involves executing the malware in a controlled environment (sandbox) and observing its runtime behavior. Process monitoring tracks which processes the malware spawns, terminates, or modifies while running — a classic dynamic technique. Malware disassembly, searching for strings, and file fingerprinting (e.g., MD5 hashing) are all static analysis techniques performed on the binary without executing it, making them distinct from dynamic analysis.
Topics
Community Discussion
No community discussion yet for this question.