Exam 312-50v13 Topic 1 Question 336 Discussion

Actual exam question for ECCouncil's 312-50v13 exam
Question #: 336
Topic #: 1
Upon analyzing anomalies in your network's traffic, you discover traces of an insidious malware strain named "ShadowFlee". This malware operates without writing files to disk, harnessing system utilities and scripts like PowerShell to stealthily execute tasks, effectively evading traditional detection mechanisms. Further, it exploits legitimate processes to propagate internally.
Given "ShadowFlee's" elusive attributes, which strategy would offer the most focused countermeasure?

Suggested Answer: D Vote an answer

Fileless malware relies on legitimate system tools such as PowerShell and script interpreters to execute in memory and evade disk-based detection. Restricting and closely monitoring the use of these tools, particularly when invoked by unauthorized or unexpected processes, directly targets the malware's primary execution and propagation mechanism.

by Queena at Sep 01, 2026, 05:48 AM

Limited Time Offer

15%

Off

Get Premium 312-50v13 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10