nerdexam
EC-Council

312-49V11 · Question #100

As a malware analyst, you're tasked with scrutinizing a suspicious program on a Windows workstation, particularly focusing on its interactions with system registry files. Monitoring registry…

Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #100. The question stem and answer options stay visible for context.

Windows Forensics

Question

As a malware analyst, you're tasked with scrutinizing a suspicious program on a Windows workstation, particularly focusing on its interactions with system registry files. Monitoring registry artifacts provides insights into malware behavior, aiding in identifying persistence mechanisms and malicious activities. How do forensic investigators gain insights into malware behavior on Windows systems by monitoring registry artifacts?

Options

  • AMonitoring network traffic patterns
  • BReviewing browser history logs
  • CTracking system file executions
  • DAnalyzing registry key modifications

Unlock 312-49V11 to see the answer

You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Windows registry forensics#registry artifacts#malware persistence#malware behavior analysis
Full 312-49V11 Practice