212-89 › Malware Incidents

Malware Incidents Practice Questions

This domain covers detecting, containing, and eradicating malware on Windows and Linux hosts. Questions test YARA rule syntax, persistence locations, delivery techniques, and the containment/eradication/recovery phase boundaries, using realistic artifacts like double extensions and autorun registry keys.