Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Get Unlimited Access

Comptia Discussions

Exam CS0-003 topic 1 question 229 discussion

Actual exam question from CompTIA's CS0-003

Question #: 229
Topic #: 1

[All CS0-003 Questions]

A security analyst has identified a new malware file that has impacted the organization. The malware is polymorphic and has built-in conditional triggers that require a connection to the internet. The CPU has an idle process of at least 70%. Which of the following best describes how the security analyst can effectively review the malware without compromising the organization’s network?

A. Utilize an RDP session on an unused workstation to evaluate the malware.
B. Disconnect and utilize an existing infected asset off the network.
C. Create a virtual host for testing on the security analyst workstation.
D. Subscribe to an online service to create a sandbox environment.

Show Suggested Answer

Suggested Answer: D 🗳️

by kitkat007 at July 7, 2024, 2:17 p.m.

Comments

Submit Cancel

kitkat007

16 hours, 43 minutes ago

Selected Answer: D

A sandbox environment is a secure, isolated virtual space where untrusted programs can be run safely. It prevents the malware from interacting with the host system or network, thereby protecting the organization’s network from potential harm. This is particularly important when dealing with polymorphic malware, which can change its code to evade detection, and malware that requires an internet connection, as it may communicate with an external server or download additional malicious components.

upvoted 1 times

...