Cisco
350-201 · Question #64
Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?
The correct answer is D. The malware contains an encryption and decryption routine to hide URLs/IP addresses and is. https://gist.github.com/yetanotherchris/810c5900616b6c76f78dedda9bf3be85
Host-Based Analysis
Question
Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?
Exhibit
Options
- AThe malware is performing comprehensive fingerprinting of the host, including a processor,
- BThe malware is a ransomware querying for installed anti-virus products and operating systems to
- CThe malware has moved to harvesting cookies and stored account information from major
- DThe malware contains an encryption and decryption routine to hide URLs/IP addresses and is
How the community answered
(33 responses)- A24% (8)
- B12% (4)
- C6% (2)
- D58% (19)
Explanation
https://gist.github.com/yetanotherchris/810c5900616b6c76f78dedda9bf3be85
Topics
#static malware analysis#IOC#obfuscation#keylogger
Community Discussion
No community discussion yet for this question.
