GIAC
GREM · Question #172
GREM Question #172: Real Exam Question with Answer & Explanation
The correct answer is A. Checking the MAC address for known VM vendor OUIs B. Looking for the presence of specific device drivers E. Enumerating running processes for VM-associated names. See the full explanation below for the reasoning.
Question
How can malware attempt to detect and respond to being run in a virtual machine? (Choose Three)
Options
- AChecking the MAC address for known VM vendor OUIs
- BLooking for the presence of specific device drivers
- CAttempting to write to known read-only memory locations
- DMeasuring the disk access time
- EEnumerating running processes for VM-associated names
Community Discussion
No community discussion yet for this question.