Question 1

What is the function of a disassembler?

Options :

A : aids performing static malware analysis

B : aids viewing and changing the running state

C : aids transforming symbolic language into machine code

D : aids defining breakpoints in program execution

Answer: A

Question 2

Refer to the exhibit. Which element in this email is an indicator of attack?

Options :

A : IP Address: 202.142.155.218

B : content-Type: multipart/mixed

C : attachment: “Card-Refund”

D : subject: “Service Credit Card”

Answer: C

Question 3

Which scripts will search a log file for the IP address of 192.168.100.100 and create an output file named parsed_host.log while printing results to the console?

Options :

A :

B :

C :

D :

Answer: A

Question 4

An “unknown error code” is appearing on an ESXi host during authentication. An engineer checks the authentication logs but is unable to identify the issue. Analysis of the vCenter agent logs shows no connectivity errors. What is the next log file the engineer should check to continue troubleshooting this error?

Options :

A : /var/log/syslog.log

B : /var/log/vmksummary.log

C : var/log/shell.log

D : var/log/general/log

Answer: A

Question 5

Refer to the exhibit. What do these artifacts indicate?

Options :

A : An executable file is requesting an application download

B : A malicious file is redirecting users to different domains.

C : The MD5 of a file is identified as a virus and is being blocked.

D : A forged DNS request is forwarding users to malicious websites.

Answer: A