FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 AdministratorDemo

By Fortinet · Question Mode

QuestionQ21

Security Management

How do attackers commonly conduct anti-virtualization checks while malware is executing to avoid sandbox detection?

  • A By making outbound C&C connections
  • B By disabling network access
  • C By querying for system components
  • D By making function calls to system DLLs
Explanation

Anti-virtualization techniques look for virtual-machine or sandbox artifacts in system components, including hardware identifiers, drivers, processes, registry entries, and firmware information. Malware can use those findings to alter or stop execution in an analysis environment.

Community Discussion

No comments yet. Be the first to start the discussion!