An engineer runs a suspicious file in a sandbox analysis tool to see the outcome. The analysis report shows that outbound callouts were made post infection. Which two pieces of information from the analysis report are needed to investigate the callouts? (Choose two.)
A) signatures
B) host IP addresses
C) file size
D) dropped files
E) domain names

Question

Quizplus · Accepted Answer

The host IP addresses and domain names are needed to investigate the outbound callouts. The host IP addresses will identify the systems that made the callouts, and the domain names will identify the destinations of the callouts.

An Engineer Runs a Suspicious File in a Sandbox Analysis