Online Access Free GREM Practice Test

When encountering obfuscated JavaScript within a webpage, what is the initial step an analyst should take?

• A.Use automated tools to attempt initial deobfuscation.
• B.Report the script as malicious without further analysis.
• C.Execute the script in a browser to observe its behavior.
• D.Deobfuscate the script manually line by line.

In the context of reversing malware, what is the role of static analysis?

• A.To analyze the code without executing it, identifying functions, variables, and logic
• B.To determine the geographic origin of the malware
• C.To interact with the malware's command and control servers safely
• D.To execute the malware in a controlled environment and observe its behavior

A PE file's .rsrc section contains an embedded executable. What is the MOST common malware characteristic?

• A.Persistence
• B.C2 hardcoding
• C.Heap spraying
• D.Self-extracting stub

What technique can be employed to analyze the behavior of a suspicious PDF without executing any malicious code?

• A.Static analysis in a secure environment
• B.Interactive analysis with active internet connection
• C.Live debugging in an unprotected environment
• D.Dynamic execution on the host operating system

Which actions are typically performed by .NET malware and should be analyzed during reverse engineering? (Choose Two)

• A.Encryption of data
• B.Modification of registry keys
• C.Serialization of objects
• D.Direct manipulation of hardware registers