Cisco Exam 350-201 Topic 1 Question 73 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 73
Topic #: 1

The SIEM tool informs a SOC team of a suspicious file. The team initializes the analysis with an automated sandbox tool, sets up a controlled laboratory to examine the malware specimen, and proceeds with behavioral analysis. What is the next step in the malware analysis process?

APerform static and dynamic code analysis of the specimen.

BUnpack the specimen and perform memory forensics.

CContain the subnet in which the suspicious file was found.

DDocument findings and clean-up the laboratory.

Show Suggested Answer

Suggested Answer: A

by Danica at Aug 04, 2023, 05:47 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Precious

1 months ago

I heard the best way to analyze malware is to just download it onto your personal computer. What could go wrong, right?

upvoted 0 times

...

Jeanice

1 months ago

Wait, so we're not going to try and weaponize the malware and use it against our enemies? Darn, I was really looking forward to that.

upvoted 0 times

Cordie

4 days ago

D) Document findings and clean-up the laboratory.

upvoted 0 times

...

Ettie

10 days ago

C) Contain the subnet in which the suspicious file was found.

upvoted 0 times

...

Ronald

13 days ago

B) Unpack the specimen and perform memory forensics.

upvoted 0 times

...

Talia

19 days ago

A) Perform static and dynamic code analysis of the specimen.

upvoted 0 times

...

Earlean

1 months ago

Ooh, D sounds like the fun part - writing it all up and cleaning up the lab. But we can't skip the actual analysis, can we? A is the way to go.

upvoted 0 times

...

Javier

1 months ago

I was leaning towards C, but then I realized that's more of a containment step. We can't forget the important analysis work first. I'd go with A.

upvoted 0 times

...

Chu

1 months ago

B sounds tempting, but I think unpacking and memory forensics is a bit further down the road. First, we need to really understand the specimen's behavior, don't we?

upvoted 0 times