nerdexam
GIAC

GCFE · Question #45

Which artifact is particularly valuable for determining the source of a malware infection in program analysis? (Choose Two)

The correct answer is A. Application logs C. Execution traces in the Registry. See the full explanation below for the reasoning.

Question

Which artifact is particularly valuable for determining the source of a malware infection in program analysis? (Choose Two)

Options

  • AApplication logs
  • BUser profile settings
  • CExecution traces in the Registry
  • DNetwork logs

How the community answered

(24 responses)
  • A
    71% (17)
  • B
    8% (2)
  • D
    21% (5)

Community Discussion

No community discussion yet for this question.

Full GCFE Practice