Which of the following is not a standard practice in dynamic malware analysis?

Analyzing the malware's code without executing it

Which of these best describes dynamic malware analysis?

Execute malware in a controlled environment and observing its behavior.

Why was the computer stressed?

It couldn't handle the network 'traffic'

Which technique is not commonly used in static malware analysis?

Observing the behavior of the malware in a live environment

Which phase of cyber incident response requires most time from analysts/responders?

Identification and Initial Assessment

Where do the log files reside in the Windows 10 operating system?

The log files reside in the winevt folder under the System32 directory.

studbud

CIRT

10 termsStudBud Administration

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
What's a computer's favorite snack?
Microchips
Bytes
Apple
Spam
2
Which of the following is not a standard practice in dynamic malware analysis?
Investigating changes made by the malware to system files and registry
Inspecting network traffic generated by the malware
Analyzing the malware's code without executing it
Monitoring the system's behavior in response to executing the malware
3
What does a hacker do on their day off?
Goes phishing
Tries to remember their own passwords
Watches "Firewall" for the 100th time
Writes poetry about encryption
4
Which of these best describes dynamic malware analysis?
Analyze malware by looking for patterns in its behavior.
Execute malware in a controlled environment and observing its behavior.
Examine the code of malware without running it.
Analyze the structure and organization of malware code.
5
Why was the computer stressed?
It had too many 'bits' to process
Too many bugs in its system
It couldn't handle the network 'traffic'
Its data was all 'encrypted'
6
In which stage of cyber incident response do analysts/responders spend most time?
Containment, Eradication, and Recovery
Post-Incident Activity
Detection and Analysis
Preparation
7
Which technique is not commonly used in static malware analysis?
Examining configuration files and data files associated with the malware
Examining high-level code in a programming language such as C or Python
Disassembling code to reveal underlying instructions
Observing the behavior of the malware in a live environment
8
Which phase of cyber incident response requires most time from analysts/responders?
Containment, Neutralization, and System Restoration
Proactive Measures and Readiness Planning
Identification and Initial Assessment
Post-Incident Reporting and Documentation
9
Where do the log files reside in the Windows 10 operating system?
The log files reside in the winevt folder under the System32 directory.
The log files reside in the log directory on the C drive.
The log files reside in the /etc directory.
The log files reside in the user profile directory.
10
Based on the order of volatility, which of the following types of evidence should be collected first?
File system information
Network diagrams
Swap files
Raw disk blocks

CIRT Flashcards | StudBud