312-49V11 · Question #37
You are a cybersecurity analyst tasked with performing dynamic malware analysis on a suspicious file received by your organization. Your objective is to understand the behavior of the malware by…
The correct answer is A. Implementing host integrity monitoring to track system changes caused by the malware. According to the CHFI v11 Malware Forensics and Malware Analysis objectives, dynamic malware analysis must be performed in a controlled, isolated, and well-monitored environment to both observe malicious behavior and prevent unintended spread to production systems. A key…
Question
You are a cybersecurity analyst tasked with performing dynamic malware analysis on a suspicious file received by your organization. Your objective is to understand the behavior of the malware by running it in a controlled environment and monitoring its actions without allowing it to propagate to the production network. As a cybersecurity analyst conducting dynamic malware analysis, what is a key aspect of designing the testing environment to ensure the safety of the production network?
Options
- AImplementing host integrity monitoring to track system changes caused by the malware.
- BDisabling antivirus software to prevent interference with the malware's execution.
- CRunning the malware on physical machines to minimize the risk of network propagation.
- DUsing outdated operating systems to reduce compatibility issues with the malware.
How the community answered
(40 responses)- A78% (31)
- B5% (2)
- C5% (2)
- D13% (5)
Explanation
According to the CHFI v11 Malware Forensics and Malware Analysis objectives, dynamic malware analysis must be performed in a controlled, isolated, and well-monitored environment to both observe malicious behavior and prevent unintended spread to production systems. A key requirement of such an environment is the ability to monitor and record all system-level changes made by the malware during execution. Host Integrity Monitoring (HIM) plays a critical role in dynamic malware analysis by tracking modifications to files, registry keys, services, processes, startup locations, system calls, and configuration settings. CHFI v11 emphasizes system behavior analysis as a core component of malware forensics, including monitoring registry artifacts, file system changes, persistence mechanisms, and process activity. HIM enables investigators to safely analyze malware impact while maintaining forensic visibility and containment.
Topics
Community Discussion
No community discussion yet for this question.