Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 688 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 688
Topic #: 1
[All 312-49v10 Questions]

A forensic investigator is performing malware analysis of a newly discovered executable suspected to be originating from a Dark Web marketplace. The investigator documents the key features, system status, and details of the forensic investigation tools, as part of the general rules for malware analysis. After an initial static analysis, the investigator prepares to move to dynamic analysis. In this context, which of the following considerations is crucial before the investigator proceeds with dynamic analysis?

  • A. Document the behavior of the malware during its installation and execution
  • B. Analyze the malware using a disassembler like IDA Pro for dynamic analysis
  • C. Execute the malware on the primary system to understand its impact on the system resources
  • D. Use sandboxes or virtual machines to contain and analyze the malware
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
aqeel1506
4 months ago
Before proceeding with dynamic analysis, the most crucial consideration is: D. Use sandboxes or virtual machines to contain and analyze the malware Using sandboxes or virtual machines is essential to isolate the malware from the primary system and prevent it from causing any harm or spreading. This containment strategy helps in safely observing the malware’s behavior and impact without risking the integrity of the actual system or network.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...