What is the primary use of the stack in function calls?

To store return addresses and local variables

To store the function's executable code

To store the function's documentation

What is a conditional jump instruction in assembly?

An instruction that transfers control based on certain conditions

An instruction that always transfers control to another location

An instruction that sets up conditions for the next instruction

An instruction that jumps randomly to different code locations

In the context of x86 assembly, what does branching refer to?

Changing the flow of execution based on conditions

Creating new threads of execution

Dividing a function into smaller functions

What is the purpose of the REP instruction prefix in x86 assembly?

To represent complex data structures

What is the typical structure of a C main function at the assembly level?

It begins with stack frame setup and ends with cleanup before returning

It always starts by clearing all registers

It must call at least one other function

What is the main difference between global and local variables in terms of memory allocation?

Global variables are stored in static data sections, local variables typically on the stack

Global variables are stored in the stack, local variables in the heap

Global variables are stored in registers, local variables in memory

There is no difference in how they are stored

Which of the following best describes a structure in C programming?

A collection of variables of different data types grouped under a single name

A collection of functions that work together

A method to structure the flow of a program

What is a function prologue in assembly?

The series of instructions at the beginning of a function that sets up the stack frame

The documentation that describes the function

The declaration of a function before it is defined

The list of parameters a function accepts

How are arrays typically accessed in x86 assembly?

Using indexed addressing with a base register and an offset

Using special array instructions

What pattern might indicate a linked list traversal in disassembled code?

Loading a value from memory, processing it, then loading the next value from an address stored in the current node

Sequential access to memory locations

Multiple function calls in sequence

What is a function epilogue in assembly?

The series of instructions at the end of a function that restores the stack and returns control

The documentation that concludes the function description

The error handling section of a function

The declaration that a function has ended

What is shellcode in the context of malware?

Small pieces of code used as the payload in exploitation

Code that creates a command shell

Code that encrypts data using shell algorithms

Which characteristic is NOT typically associated with shellcode?

No dependencies on external libraries

What is the purpose of an egg hunter in shellcode?

To search memory for a specific pattern that precedes the main payload

To search for Easter eggs hidden in the code

To catch errors in the shellcode execution

To hunt for vulnerabilities in the target system

Which of the following is a common method to analyze shellcode?

Disassembling it and studying the instructions

Running it directly on the host operating system

Sending it to the antivirus vendor

Why is a virtual machine recommended for malware analysis?

It provides isolation to prevent malware from infecting the host system

It runs faster than physical hardware

It automatically detects and removes malware

It allows for easier network analysis

What is the purpose of taking snapshots in a VM before analyzing malware?

To allow easy restoration to a clean state after analysis

To document the analysis process

To create backups of the malware

To compare different malware samples

What is the primary role of Linux VMs in a malware analysis lab?

To provide network services and analysis tools

To analyze Linux-specific malware

To store malware samples securely

To protect Windows VMs from infection

What does DNS traffic analysis help identify in malware behavior?

Domain names the malware attempts to contact

The programming language used to write the malware

The encryption algorithms used by the malware

What is a C2 (Command and Control) server in the context of malware?

A server that remotely controls infected machines

A server that controls computer cooling systems

A server that distributes malware updates

A server that manages antivirus databases

What does analyzing HTTP headers in malware traffic help identify?

User-agent strings and other identifying information

What is code obfuscation in malware?

A technique to hide the true intent and functionality of code

A technique to make code more efficient

A technique to make code more readable

A technique to automatically document code

What is polymorphic malware?

Malware that changes its code each time it replicates while maintaining functionality

Malware that can infect multiple operating systems

Malware that can perform multiple types of attacks

Malware that only works on multiple-core processors

What is a sandbox evasion technique?

A method used by malware to detect and avoid analysis environments

A method to bypass antivirus software

A method to hide from system administrators

A method to prevent malware from spreading

What is the purpose of a packer in malware?

To obfuscate the malware code and evade detection

To compress the malware to save disk space

To package multiple malware components together

To facilitate easier distribution of the malware

What is memory forensics in malware analysis?

Analysis of a computer's physical memory to find evidence of malware

Analysis of how much memory malware consumes

Analysis of memory management techniques used by malware

Analysis of memory leaks caused by malware

Which of the following is NOT a common indicator of compromise (IOC)?

Unusual outbound network traffic

Unexplained registry or system file changes

Unusual account creation or modification

What is the YARA tool used for in malware analysis?

A pattern matching tool designed to identify malware based on text or binary patterns

Yet Another Remote Administration tool for controlling infected systems

A tool for removing malware from infected systems

A tool for creating malware signatures

What is the relationship between static and dynamic analysis in a comprehensive malware investigation?

They complement each other to provide a more complete understanding

They are mutually exclusive approaches

Static analysis always precedes dynamic analysis

Dynamic analysis is always more effective than static analysis

What is the purpose of attribution in malware analysis?

To identify and understand who created the malware and why

To assign blame to infected users

To determine which antivirus company discovered the malware

To acknowledge the researchers who analyzed the malware

What is threat intelligence in the context of malware analysis?

Information about potential malware threats collected by analyzing past attacks

The intellectual capability of malware to evade detection

The ability of malware to corrupt threat databases

Intelligence agencies that create malware

What is a fileless malware?

Malware that doesn't create any files on the disk

Malware that has a file size of zero bytes

Malware that deletes all files on the system

Malware that cannot be analyzed

A type of malware that infects the master boot record

Software used to boot into safe mode

A utility for repairing boot sectors

What is the primary challenge in analyzing mobile malware compared to desktop malware?

Different operating system architecture and security models

Mobile malware is always more complex

Mobile malware cannot be executed in virtual environments

Mobile malware always uses encryption

What distinguishes APT (Advanced Persistent Threat) malware from common malware?

APT malware is typically part of longer-term, targeted campaigns often backed by substantial resources

APT malware is always written in advanced programming languages

APT malware always exploits advanced vulnerabilities

APT malware persists through system reboots

Malware Analysis Surprise Test 2

University

•

50 Qs

Similar activities

Relational Database Design

University

•

47 Qs

USBN TIK KELAS 9A-9C

9th Grade - University

•

50 Qs

Rekayasa Perangkat Lunak

University

•

50 Qs

Lesson 1 Quiz: Spreadsheets using Excel

University

•

45 Qs

Data Communication and Network

11th Grade - University

•

50 Qs

IP MIDTERM

University

•

45 Qs

Pendahuluan Cisco Packet Tracer

University

•

55 Qs

Introduction to Multimedia

University

•

45 Qs

Malware Analysis Surprise Test 2

Quiz

•

Computers

•

University

•

Practice Problem

•

Easy

Balachander T

Used 5+ times

FREE Resource

A list of instructions to be executed

A heap memory allocation system

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

50 questions

DG Muda (2)

Quiz

•

KG - Professional Dev...

45 questions

Comptia Network+ chapter 1-3 exam

Quiz

•

11th Grade - University

50 questions

TIN HỌC 6 - ÔN TẬP GK1 2425

Quiz

•

6th Grade - University

47 questions

Networking - Practice Test #1

Quiz

•

9th Grade - University

50 questions

KUIS Jaringan Komputer dan Internet

Quiz

•

7th Grade - University

50 questions

Test

Quiz

•

8th Grade - University

55 questions

NETWORK HARDWARE

Quiz

•

University - Professi...

55 questions

SAINS KOMPUTER TINGKATAN 4

Quiz

•

12th Grade - University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

54 questions

Analyzing Line Graphs & Tables

Quiz

•

4th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

Discover more resources for Computers

20 questions

CompTIA Network+ - Ports and Protocols

Quiz

•

University

Malware Analysis Surprise Test 2

50 questions

What does an opcode specify in assembly language?

What are operands in assembly language?

Which register is commonly used as the accumulator in x architecture?

What is the purpose of the ESP register in x86 architecture?

Which assembly instruction is used to call a function?

What does the RET instruction do?

What is the stack in computer architecture?

Which instruction is used to push a value onto the stack in x86 assembly?

What is the primary use of the stack in function calls?

What is a conditional jump instruction in assembly?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers