Cisco Exam 350-201 Topic 1 Question 73 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 73
Topic #: 1

The SIEM tool informs a SOC team of a suspicious file. The team initializes the analysis with an automated sandbox tool, sets up a controlled laboratory to examine the malware specimen, and proceeds with behavioral analysis. What is the next step in the malware analysis process?

APerform static and dynamic code analysis of the specimen.

BUnpack the specimen and perform memory forensics.

CContain the subnet in which the suspicious file was found.

DDocument findings and clean-up the laboratory.

Show Suggested Answer

Suggested Answer: A

by Danica at Aug 04, 2023, 05:47 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fausto

16 days ago

Aha, I know this one! It's A - static and dynamic code analysis. Gotta get under the hood and see what that malware is really up to.

upvoted 0 times

...

Leatha

24 days ago

I think we should also unpack the specimen and perform memory forensics to gather more information.

upvoted 0 times

...

Laquita

26 days ago

I agree with Kenny. It's important to analyze the code to understand the behavior of the malware.

upvoted 0 times

...

Kenny

1 months ago

I think the next step is to perform static and dynamic code analysis of the specimen.

upvoted 0 times

...