Exam 312-49v10 topic 1 question 748 discussion

Actual exam question from ECCouncil's 312-49v10

Question #: 748
Topic #: 1

As part of an ongoing investigation, a CHFI is tasked with identifying and analyzing stealthy malware that has caused severe damage to a major corporation's systems. The malware has left minimal traces, demonstrating its sophisticated nature. It's also believed that the malware originated from the dark web. Based on the available information, what should be the investigator's priority in the malware forensic process?

A. Immediately searching the dark web for similar malware signatures
B. Creating a list of IoCs from other machines in the network to check for malware presence
C. Setting up a controlled malware analysis lab to study the behavior of the malware
D. Sending a copy of the malware to anti-virus companies for urgent signature development

Show Suggested Answer

Suggested Answer: C 🗳️

by 044f354 at March 28, 2025, 8:15 p.m.

Comments

Submit Cancel

044f354

3 days, 14 hours ago

Selected Answer: C

ECCouncil Official CHFI https://bookshelf.vitalsource.com/reader/books/9781635676969/ Module 14 Page 1299 - Usually, malware analysis is carried out by infecting a system with a malicious code and then evaluating its behavior using a set of monitoring tools. Therefore, a dedicated laboratory system is required that can be infected while keeping the production environment safe. - If you agree: UPVOTE this post to add your vote to the community tally. If you disagree: discuss with citations Both actions crowdsource best answers.

upvoted 1 times

...

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 748 discussion

Comments

044f354

SY0-701