Exam 312-49v10 topic 1 question 686 discussion

Answer: B Enabling shared folders increases risk of malware escaping the sandbox. (A) ✅ Ubuntu can be used as a secure forensic analysis host. (B) ❌ Shared folders/guest isolation compromise containment, violating malware lab isolation best practices. (C) ✅ INetSim with host-only NIC safely simulates network services without exposing to the internet. (D) ✅ VM snapshots are standard practice to restore clean environments after analysis. ----- If you agree: UPVOTE this post to add your vote to the community tally. If you disagree: discuss with citations Both actions crowdsource best answers.

A. Installing a guest OS such as Ubuntu in virtual machines will serve as forensic workstations The textbook emphasizes the use of Windows-based virtual machines for analyzing Windows malware to ensure compatibility and proper analysis. Installing a Linux-based OS like Ubuntu would not be appropriate for analyzing Windows binary executables. The other procedures mentioned—using shared folders with guest isolation, using simulation tools, and creating snapshots—are in line with best practices for preparing a malware analysis testbed.