Which of the following techniques is MOST useful when dealing with Advanced persistent Threat (APT) intrusions on live virtualized environments?

The correct answer is C. Memory forensics. Memory forensics is the most useful technique when dealing with Advanced Persistent Threat (APT) intrusions on live virtualized environments. Memory forensics is the analysis of the volatile memory of a system, such as RAM, cache, or registers. Memory forensics can reveal valuabl

Submitted by joshua94· Mar 5, 2026Security Operations

Question

Which of the following techniques is MOST useful when dealing with Advanced persistent Threat (APT) intrusions on live virtualized environments?

Options

AAntivirus operations
BReverse engineering
CMemory forensics
DLogfile analysis

How the community answered

(31 responses)

A
3% (1)
B
6% (2)
C
81% (25)
D
10% (3)

Explanation

Memory forensics is the most useful technique when dealing with Advanced Persistent Threat (APT) intrusions on live virtualized environments. Memory forensics is the analysis of the volatile memory of a system, such as RAM, cache, or registers. Memory forensics can reveal valuable information about the state and activities of the system, such as running processes, open files, network connections, encryption keys, malware signatures, and user credentials. Memory forensics is especially useful for detecting and investigating APTs, which are stealthy and persistent attacks that often evade traditional security measures and leave little or no traces on

Topics

#APT#memory forensics#virtualization security#incident response

Community Discussion

No community discussion yet for this question.

Full CISSP Practice