A security analyst has a sample of malicious software and needs to know what the sample in a
carefully controlled and monitored virtual machine to observe the software’s behavior. After the
software has run, the analyst returns the virtual machines OS to a pre-defined know good state
using what feature of virtualization?
A.
Host elasticity
B.
Antivirus
C.
sandbox
D.
snapshots
For starters, the question is wrongly worded:
A security analyst has a sample of malicious software and needs to know what the sample in a carefully controlled and monitored virtual machine to observe the software’s behavior. After the software has run, the analyst returns the virtual machines OS to a pre-defined good state using what feature of virtualization?
All I need to do in this case is to apply a previous snapshot of the VM.
0
0