5.2 Detect, Analyze, and Mitigate Malware Incidents CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which malware detection technique relies on comparing file hashes or byte sequences against a database of known malicious patterns?

   • ABehavioral analysis
   • BSignature-based detection
   • CHeuristic analysis
   • DMachine learning classification
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a reputation service in malware detection?

   • ATo authenticate users
   • BTo assign a risk score to files, URLs, or IP addresses based on historical and real-time data
   • CTo provide a backup of critical data
   • DTo replace firewall rules
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of a sandbox in malware analysis?

   • ATo safely execute suspicious code in an isolated environment to observe its behavior
   • BTo permanently delete malicious files
   • CTo provide a backup environment for critical servers
   • DTo encrypt sensitive data
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the term for the process of submitting a suspicious file or URL to a sandbox for execution and behavioral analysis?

   • AEncapsulation
   • BIsolation
   • CDetonation
   • DQuarantine
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is an indicator of compromise (IOC)?

   • AA type of firewall rule
   • BA software patch for a vulnerability
   • CA piece of forensic evidence that suggests a system has been compromised
   • DA security control that prevents malware execution
   Reveal Solution Discussion Select an answer first