Cybersecurity Final Exam Review

Which should come first in malware analysis - static or dynamic?

• static

• dynamic

• neither - should be done at the same time

• they are the same thing

What are the tools called that obfuscates malware, compresses or encrypts malware and contains anti-analysis features?

• wrappers

• trojans

• packers

• none of the above

When doing dynamic malware analysis, it is important to ...

• make the environment it is being tested in as "real life" looking as possible

• make sure the environment is self contained - is a "host only" machine

• both of these

• neither of these

To take the malware and figure out how it was built is called

• Dynamic Analysis

• Reverse Engineering

• Build Wrapping

• None of the above

What is a Hex Dump?

• Removing all negative features of the software

• Displaying what exactly is in each byte of the software

• Interpreting the characters that make up a compressed file.

• None of the above

When generating the Hash of a File you are

• Determining if it is malicious or not

• Determining what is in each of the bytes of the file

• Making the file no longer dangerous

• None of the above

When doing Reverse Engineering - one stage is modeling - this means:

• Recreating code that does the same thing but can be controled

• Breaking the program down to understand the impact of each part

• Comparing the malware operation to other known applications by running them side by side

• None of the above

What is John the Ripper?

• Reformats Malware to make it no longer dangerous

• Tells you what files contain malware

• Scans your system to know where malware is hidden

• None of the above

The purpose of Virus Total is to

• Tell you if a file is known to be dangerous

• Tells you if a website is known to be dangerous

• Uses many Engines in the same scan

• All of the above

Who owns Virus Total?

• Amazon Web Services

• VirusTotal Inc.

• Google

• None of the above