Cisco
350-201(NEW-127Q) · Question #2
350-201(NEW-127Q) Question #2: Real Exam Question with Answer & Explanation
Sign in or unlock 350-201(NEW-127Q) to reveal the answer and full explanation for question #2. The question stem and answer options stay visible for context.
Incident Response
Question
Amid a critical cybersecurity incident, a multinational corporation has a suspected breach involving an advanced and evasive strain of malware. The cybersecurity team is under immense pressure to rapidly and effectively analyze this threat while ensuring minimal disruption to critical operations. They have access to advanced analysis tools and must make strategic decisions.
Given this challenging scenario, which sequence of actions should the cybersecurity team follow to efficiently assess this highly sophisticated malware's code, behavior, and communication patterns?
Options
- ABegin with dynamic analysis to observe real-time behavior, followed by static analysis to dissect the malware's code.
- BPrioritize static analysis to gain a deep understanding of the malware's code structure, then execute the malware in a controlled environment for behavioral observation, and conclude with network traffic analysis to assess its impact on network infrastructure.
- CStart with network traffic analysis to rapidly identify command and control servers, comprehensively understand communication patterns, and assess the malware's impact on network infrastructure. Subsequently, perform behavioral analysis by executing the malware in a controlled environment, and conclude with static analysis to dissect the malware's code structure.
- DInitiate the analysis by executing the malware in a controlled environment for behavioral observation, followed by network traffic analysis to identify command and control servers, and conclude with static analysis to examine the code for vulnerabilities.
Unlock 350-201(NEW-127Q) to see the answer
You've previewed enough free 350-201(NEW-127Q) questions. Unlock 350-201(NEW-127Q) for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Malware Analysis#Incident Response#Network Analysis#Behavioral Analysis