Cisco
350-201 · Question #63
Refer to the exhibit. An engineer is reverse engineering a suspicious file by examining its resources. What does this file indicate?
The correct answer is A. a DOS MZ executable format. The DOS MZ executable format is the executable file format used for. EXE files in DOS. The file can be identified by the ASCII string "MZ" (hexadecimal: 4D 5A) at the beginning of the file (the "magic number").
Host-Based Analysis
Question
Refer to the exhibit. An engineer is reverse engineering a suspicious file by examining its resources. What does this file indicate?
Exhibit
Options
- Aa DOS MZ executable format
- Ba MS-DOS executable archive
- Can archived malware
- Da Windows executable file
How the community answered
(46 responses)- A91% (42)
- B2% (1)
- C4% (2)
- D2% (1)
Explanation
The DOS MZ executable format is the executable file format used for. EXE files in DOS. The file can be identified by the ASCII string "MZ" (hexadecimal: 4D 5A) at the beginning of the file (the "magic number").
Topics
#file format identification#static analysis#PE format#reverse engineering
Community Discussion
No community discussion yet for this question.