A Forensics Analyst Suspects That a Breach Has Occurred

question 261

Multiple Choice

A forensics analyst suspects that a breach has occurred. Security logs show the company's OS patch system may be compromised, and it is serving patches that contain a zero-day exploit and backdoor. The analyst extracts an executable file from a packet capture of communication between a client computer and the patch server. Which of the following should the analyst use to confirm this suspicion?

• A) File size
• B) Digital signature
• C) Checksums
• D) Anti-malware software
• E) Sandboxing

---

Definitions:

Mental Illness

A broad category of conditions affecting a person's thinking, emotional state, and behavior that disrupts their ability to work or carry out other daily activities.

Visual Impairments

A range of conditions that involve partial or total loss of sight which cannot be corrected by standard glasses or contact lenses.

Sleepwalk

The act of walking or performing complex behaviors while in a state of sleep, also known as somnambulism.

10-year-old Child

Refers to a human being who is approximately a decade old, typically undergoing late childhood development stages.