nerdexam
EC-Council

312-50V13 · Question #612

In the process of setting up a lab for malware analysis, a cybersecurity analyst is tasked to establish a secure environment using a sheep dip computer. The analyst must prepare the testbed while…

The correct answer is B. Connecting the system to the production network during the malware analysis. When setting up a sheep dip computer for malware analysis, the analyst must avoid connecting the system to the production network to prevent potential malware contamination.

Submitted by rohit_dlh· Mar 6, 2026Malware Threats

Question

In the process of setting up a lab for malware analysis, a cybersecurity analyst is tasked to establish a secure environment using a sheep dip computer. The analyst must prepare the testbed while adhering to best practices. Which of the following steps should the analyst avoid when configuring the environment?

Options

  • AInstalling malware analysis tools on the guest OS
  • BConnecting the system to the production network during the malware analysis
  • CSimulating Internet services using tools such as INetSim
  • DInstalling multiple guest operating systems on the virtual machine(s)

How the community answered

(29 responses)
  • A
    7% (2)
  • B
    90% (26)
  • D
    3% (1)

Why each option

When setting up a sheep dip computer for malware analysis, the analyst must avoid connecting the system to the production network to prevent potential malware contamination.

AInstalling malware analysis tools on the guest OS

Installing malware analysis tools on the guest OS is a standard and necessary step for performing effective malware analysis within the isolated environment.

BConnecting the system to the production network during the malware analysisCorrect

A sheep dip computer is specifically designed to be an isolated environment for analyzing potentially malicious files. Connecting it to the production network introduces a significant risk, as any active malware could escape the sandbox and infect the organization's critical systems, compromising network integrity and data security.

CSimulating Internet services using tools such as INetSim

Simulating Internet services using tools like INetSim is a best practice for malware analysis, allowing the malware to believe it has network access without actually connecting to the internet, thus observing its network-related behaviors safely.

DInstalling multiple guest operating systems on the virtual machine(s)

Installing multiple guest operating systems on virtual machines can be beneficial for testing malware behavior across different environments or for isolating different analysis tasks within the lab.

Concept tested: Malware analysis lab best practices

Topics

#malware analysis#secure lab#isolation#production network

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V13 Practice