Fundamentals of InfoSecintermediate
Select ALL accurate statements regarding basic malware analysis tools.
Answer
The strings utility extracts printable character sequences from a binary to reveal potential indicators such as URLs and system commands.
Explanation
### Why this is right
- **The `strings` command extracts readable character sequences from a file.** It can reveal text that may help an analyst understand a file.
- **RegShot shows changes in the Windows registry.** It helps compare registry state before and after activity.
- **CaptureBAT can record process, file-system, registry, and network activity.** Those observations help show a program's effects on a host.
- **A file hash can provide a fixed-length fingerprint of a file.** It can help identify a particular sample.
### The concept
These tools answer different questions: strings reveal readable text; RegShot focuses on registry differences; CaptureBAT captures several kinds of host activity; a hash identifies file contents with a compact value.
### The other options
- **D. VirusTotal analysis can never alert an attacker.**: The material warns that using VirusTotal may alert attackers that a sample has been found.
### Terms
- **Hash**: A fixed-length value calculated from data and used as a fingerprint.
- **Registry**: A Windows configuration database.
- **VirusTotal**: An online service that analyzes files and URLs.
### Remember
A tool's result and its operational risks both matter when planning analysis.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free