nerdexam
CompTIA

N10-005 · Question #445

Which of the following assists a network administrator in reverse engineering malware and viruses?

The correct answer is B. Virtual machines. Virtual machines provide isolated sandboxed environments where malware can be safely executed, observed, and reverse-engineered without risk of infecting the production system, and snapshots allow easy rollback.

Network security

Question

Which of the following assists a network administrator in reverse engineering malware and viruses?

Options

  • AVirtual switches
  • BVirtual machines
  • CVLANs
  • DIDS

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    88% (29)
  • C
    3% (1)
  • D
    6% (2)

Why each option

Virtual machines provide isolated sandboxed environments where malware can be safely executed, observed, and reverse-engineered without risk of infecting the production system, and snapshots allow easy rollback.

AVirtual switches

Virtual switches are software-defined Layer 2 switches used to connect virtual machines within a hypervisor environment - they provide networking between VMs but are not themselves analysis or sandboxing tools.

BVirtual machinesCorrect

A virtual machine creates a complete isolated operating system environment with its own memory, storage, and network stack, separate from the host. Security researchers use VMs to detonate and analyze malware in a controlled sandbox, take memory snapshots at key moments, and revert the environment after analysis - none of which is possible safely on physical hardware without risk of propagation.

CVLANs

VLANs are used to logically segment networks to control traffic flow - they do not provide an execution environment for safely running and analyzing malware.

DIDS

An IDS (Intrusion Detection System) monitors network or host activity for suspicious patterns and generates alerts - it detects threats but does not provide an isolated environment for hands-on malware reverse engineering.

Concept tested: Virtual machines as malware analysis sandboxes

Source: https://www.vmware.com/topics/glossary/content/virtual-machine

Topics

#virtual machines#malware analysis#security sandbox#reverse engineering

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice