QuestionQ26
Procedures and MethodologyA security research team is building a dedicated malware-analysis testbed. The team makes sure the testing environment is isolated from the functional network, so malware cannot affect business operations. The testbed contains virtual machines, victim machines with varying configurations (patched and unpatched), and required tools such as imaging tools, file-analysis tools, and network-capture tools.
What is the primary advantage of using a sandbox environment in the malware-analysis lab?
- A The sandbox isolates malware from the external network but does not impact malware execution.
- B The sandbox ensures all virtual machines are updated with the latest security patches before testing.
- C The sandbox allows malware to execute in a controlled setting without risking network-wide infection.
- D The sandbox enables malware to access the functional network for testing propagation.
Community Discussion