Which statement is true about sandboxing?
- Using a sandbox technique ensures that no malware infected files can get in the network.
- Running a file in a sandbox guarantees that the disposition will show the threat that it poses to your environment.
- Malware authors deploy several techniques to bypass sandbox analysis.
- Using a sandbox replaces the need for expensive antivirus and firewall software.
Explanation & Hint:
The statement that is true about sandboxing is: Malware authors deploy several techniques to bypass sandbox analysis. Sandboxing is a security technique that isolates and runs untrusted or potentially malicious code in a controlled environment to analyze its behavior and potential threats. However, malware authors are aware of sandboxing techniques and have developed various evasion and detection avoidance mechanisms to make it more difficult for sandbox environments to detect and analyze their malware. These evasion techniques may include checks for the presence of typical sandbox indicators, delays in malicious activities, and other tactics to bypass or confuse sandbox analysis. The other statements are not accurate:
|