nerdexam
Cisco

350-201 · Question #64

Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?

The correct answer is D. The malware contains an encryption and decryption routine to hide URLs/IP addresses and is. https://gist.github.com/yetanotherchris/810c5900616b6c76f78dedda9bf3be85

Host-Based Analysis

Question

Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?

Exhibit

350-201 question #64 exhibit

Options

  • AThe malware is performing comprehensive fingerprinting of the host, including a processor,
  • BThe malware is a ransomware querying for installed anti-virus products and operating systems to
  • CThe malware has moved to harvesting cookies and stored account information from major
  • DThe malware contains an encryption and decryption routine to hide URLs/IP addresses and is

How the community answered

(33 responses)
  • A
    24% (8)
  • B
    12% (4)
  • C
    6% (2)
  • D
    58% (19)

Explanation

https://gist.github.com/yetanotherchris/810c5900616b6c76f78dedda9bf3be85

Topics

#static malware analysis#IOC#obfuscation#keylogger

Community Discussion

No community discussion yet for this question.

Full 350-201 Practice