최신GIAC Reverse Engineering Malware - GREM무료샘플문제
문제1
What behaviors in a PDF file could indicate malicious intent? (Choose two)
What behaviors in a PDF file could indicate malicious intent? (Choose two)
정답: A,B
문제2
Which of the following indicators should raise suspicion when analyzing a PDF? (Choose Two)
Which of the following indicators should raise suspicion when analyzing a PDF? (Choose Two)
정답: A,D
문제3
Which of the following statements is true when dealing with malware that employs misdirection through code restructuring?
Which of the following statements is true when dealing with malware that employs misdirection through code restructuring?
정답: C
문제4
You are investigating a suspicious .NET malware sample that uses encrypted strings to hide its payload. You've identified the decryption routine.
How would you proceed with the analysis? (Choose three)
You are investigating a suspicious .NET malware sample that uses encrypted strings to hide its payload. You've identified the decryption routine.
How would you proceed with the analysis? (Choose three)
정답: A,B,C
문제5
Which actions are typically performed by .NET malware and should be analyzed during reverse engineering? (Choose Two)
Which actions are typically performed by .NET malware and should be analyzed during reverse engineering? (Choose Two)
정답: A,C
문제6
Which of the following behaviors could indicate that a macro in an Office document is malicious?
(Choose two)
Which of the following behaviors could indicate that a macro in an Office document is malicious?
(Choose two)
정답: B,D
문제7
Which of the following is a common obfuscation technique used in .NET malware?
Which of the following is a common obfuscation technique used in .NET malware?
정답: C
문제8
When analyzing malicious software, what is an indicator of anti-emulation techniques being used?
When analyzing malicious software, what is an indicator of anti-emulation techniques being used?
정답: D