An Analyst Is Investigating Anomalous Behavior on a Corporate-Owned, Corporate-Managed

question 305

Multiple Choice

An analyst is investigating anomalous behavior on a corporate-owned, corporate-managed mobile device with application whitelisting enabled, based on a name string. The employee to whom the device is assigned reports the approved email client is displaying warning messages that can launch browser windows and is adding unrecognized email addresses to the "compose" window. Which of the following would provide the analyst the BEST chance of understanding and characterizing the malicious behavior?

• A) Reverse engineer the application binary.
• B) Perform static code analysis on the source code.
• C) Analyze the device firmware via the JTAG interface.
• D) Change to a whitelist that uses cryptographic hashing.
• E) Penetration test the mobile application.

---

Definitions:

Cash Dividends

A distribution of a company's earnings to its shareholders in the form of cash.

Statement of Cash Flows

A financial report that provides a summary of the cash inflows and outflows for a business over a specific period, categorizing them as operating, investing, or financing activities.

Operating Activities

Transactions involved in the main business functions of an entity, including revenue and expense activities.

Indirect Method

A cash flow statement reconciliation technique that adjusts net income for non-cash transactions, deferred amounts, and accruals to calculate operating cash flow.