350-701 · Question #477
What is the process of performing automated static and dynamic analysis of files in an isolated environment against preloaded behavioral indicators for threat analysis?
The correct answer is C. advanced sandboxing. The process of performing automated static and dynamic analysis of files in an isolated environment against preloaded behavioral indicators for threat analysis is known as advanced sandboxing.
Question
What is the process of performing automated static and dynamic analysis of files in an isolated environment against preloaded behavioral indicators for threat analysis?
Options
- Adeep visibility scan
- Bpoint-in-time checks
- Cadvanced sandboxing
- Dadvanced scanning
How the community answered
(36 responses)- A3% (1)
- B8% (3)
- C86% (31)
- D3% (1)
Why each option
The process of performing automated static and dynamic analysis of files in an isolated environment against preloaded behavioral indicators for threat analysis is known as advanced sandboxing.
Deep visibility scan is a broad term for thorough inspection, but it doesn't specifically describe the isolated, behavioral analysis process of sandboxing.
Point-in-time checks refer to security assessments at a specific moment, lacking the continuous behavioral analysis aspect of sandboxing.
Advanced sandboxing involves executing suspicious files in a virtual, isolated environment to observe their behavior (dynamic analysis) and also analyzing their code without execution (static analysis) against known malicious behavioral indicators to determine if they pose a threat, without risking the actual network.
Advanced scanning is a general term for enhanced inspection techniques, but it does not specifically define the isolated execution and behavioral analysis characteristic of sandboxing.
Concept tested: Advanced sandboxing for threat analysis
Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/what-is-sandboxing.html
Topics
Community Discussion
No community discussion yet for this question.