Malware Analysis (CySA+): Static vs Dynamic Methods

Submit

2. True or False: Zero-day malware with no known signatures can only be detected through dynamic analysis.

True

False

3. Which approach involves monitoring system calls, file modifications, and API invocations in real-time?

Static disassembly

Dynamic behavioral analysis

Signature matching

Hash verification

Submit

5. True or False: Combining static and dynamic analysis provides more comprehensive malware detection.

True

False

6. Which malware behavior is best observed through dynamic analysis?

Variable declarations

Command and control server connections

Function naming

Code comments

Submit

8. What does YARA help security analysts accomplish during static analysis?

Monitor process execution

Create rules to identify malware patterns

Decrypt encrypted files

Analyze network packets

9. True or False: Static analysis is always sufficient to detect all types of malware.

True

False

10. Which approach would best detect a rootkit that hides its presence?

File signature scanning only

Dynamic analysis in a controlled environment

Static code review

Firewall inspection

11. Which malware analysis approach examines code without executing it?

Static analysis

Dynamic analysis

Behavioral analysis

Sandbox testing

12. What is a key limitation of static analysis with obfuscated malware?

It requires internet connectivity

Code readability and understanding are severely reduced

It can only detect viruses

It modifies the original executable

13. True or False: Polymorphic malware can easily evade static signature-based detection.

True

False

Submit

15. Which static analysis technique involves examining code structure without running it?

Memory forensics

Network traffic analysis

Reverse engineering

API monitoring

16. What does a sandbox provide during dynamic malware analysis?

Code decompilation

Isolated execution environment

Binary obfuscation

Encryption decryption

17. True or False: Dynamic analysis always requires executing malware in an isolated environment.

True

False

Submit

19. Which tool is commonly used for disassembly during static analysis?

Wireshark

IDA Pro

Cuckoo Sandbox

Process Explorer

20. What is the primary advantage of dynamic malware analysis?

Faster than static analysis

Observes actual runtime behavior and system interactions

Does not require any tools

Always identifies encrypted code

Malware Analysis Quiz: Static or Dynamic?

1. Dynamic analysis monitors malware behavior through system calls, registry access, and ____.

2.

What first name or nickname would you like us to use?

2. True or False: Zero-day malware with no known signatures can only be detected through dynamic analysis.

3. Which approach involves monitoring system calls, file modifications, and API invocations in real-time?

4. A malware analyst uses IDA Pro to examine assembly code and identify suspicious functions. This is an example of ____ analysis.

5. True or False: Combining static and dynamic analysis provides more comprehensive malware detection.

6. Which malware behavior is best observed through dynamic analysis?

7. Packed or encrypted malware often requires ____ analysis to reveal its true functionality.

8. What does YARA help security analysts accomplish during static analysis?

9. True or False: Static analysis is always sufficient to detect all types of malware.

10. Which approach would best detect a rootkit that hides its presence?

11. Which malware analysis approach examines code without executing it?

12. What is a key limitation of static analysis with obfuscated malware?

13. True or False: Polymorphic malware can easily evade static signature-based detection.

14. Cuckoo Sandbox is primarily used for ____ malware analysis.

15. Which static analysis technique involves examining code structure without running it?

16. What does a sandbox provide during dynamic malware analysis?

17. True or False: Dynamic analysis always requires executing malware in an isolated environment.

18. Static analysis can identify malware by examining ____.

19. Which tool is commonly used for disassembly during static analysis?

20. What is the primary advantage of dynamic malware analysis?