350-201 · Question #24
An engineer is utilizing interactive behavior analysis to test malware in a sandbox environment to see how the malware performs when it is successfully executed. A location is secured to perform…
The correct answer is D. Disassemble the malware to understand how it was constructed. After securing a location to perform reverse engineering on a piece of malware, the next step the engineer should take is to disassemble the malware. Disassembly is the process of converting machine code into assembly code, which is a more human-readable form of the code. This…
Question
An engineer is utilizing interactive behavior analysis to test malware in a sandbox environment to see how the malware performs when it is successfully executed. A location is secured to perform reverse engineering on a piece of malware. What is the next step the engineer should take to analyze this malware?
Options
- ARun the program through a debugger to see the sequential actions
- BUnpack the file in a sandbox to see how it reacts
- CResearch the malware online to see if there are noted findings
- DDisassemble the malware to understand how it was constructed
How the community answered
(18 responses)- A17% (3)
- B6% (1)
- D78% (14)
Explanation
After securing a location to perform reverse engineering on a piece of malware, the next step the engineer should take is to disassemble the malware. Disassembly is the process of converting machine code into assembly code, which is a more human-readable form of the code. This allows the engineer to understand how the malware was constructed and how it works. The engineer can also identify any malicious functions and understand the malware's behavior and purpose.
Topics
Community Discussion
No community discussion yet for this question.