Refer to the exhibit. An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?
A.
The malware is performing comprehensive fingerprinting of the host, including a processor, motherboard manufacturer, and connected removable storage.
B.
The malware is a ransomware querying for installed anti-virus products and operating systems to encrypt and render unreadable until payment is made for file decryption.
C.
The malware has moved to harvesting cookies and stored account information from major browsers and configuring a reverse proxy for intercepting network activity.
D.
The malware contains an encryption and decryption routine to hide URLs/IP addresses and is storing the output of loggers and webcam captures in locally encrypted files for retrieval.
D. The malware contains an encryption and decryption routine to hide URLs/IP addresses and is storing the output of loggers and webcam captures in locally encrypted files for retrieval.
The indicator of compromise in this scenario is:
D. The malware contains an encryption and decryption routine to hide URLs/IP addresses and is storing the output of loggers and webcam captures in locally encrypted files for retrieval.
ChatGPT
D. The malware contains an encryption and decryption routine to hide URLs/IP addresses and is storing the output of loggers and webcam captures in locally encrypted files for retrieval.
An indicator of compromise (IOC) is a characteristic of an attack that can be used to identify it. In this scenario, the malware is capturing keys and webcam events on a company server. One way it could do this is by using an encryption and decryption routine to hide URLs/IP addresses and storing the output of loggers and webcam captures in locally encrypted files for retrieval. This behavior is an indicator of compromise, as it shows that the malware is attempting to hide its tracks and steal sensitive information from the company.
This section is not available anymore. Please use the main Exam Page.350-201 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Bobster02
Highly Voted 1 year, 11 months agoDrVoIP
Most Recent 8 months, 2 weeks agoETSec
9 months, 2 weeks agokyle942
10 months, 3 weeks agoattiko
1 year agokyle942
1 year, 1 month ago