An Engineer Runs a Suspicious File in a Sandbox Analysis

question 82

Multiple Choice

An engineer runs a suspicious file in a sandbox analysis tool to see the outcome. The analysis report shows that outbound callouts were made post infection. Which two pieces of information from the analysis report are needed to investigate the callouts? (Choose two.)

• A) signatures
• B) host IP addresses
• C) file size
• D) dropped files
• E) domain names

---

Definitions:

SSD Bay

A specifically designed compartment within a computer or server for housing a solid-state drive, which uses integrated circuit assemblies as memory.

Nonvolatile Storage

A type of storage that retains data even when the device is powered off, such as SSDs or flash drives.

Cloud Storage

A service model where data is maintained, managed, backed up remotely, and made available to users over a network, typically the internet.

RAM

Random Access Memory, a type of computer memory that can be accessed randomly; it is used for storing data temporarily while programs are running.