300-215 Exam Dumps : Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

The Cisco Secure Firewall Threat Defense (Firepower) includes advanced capabilities such as intrusion prevention, URL filtering, and deep packet inspection. According to the CyberOps guide, it can detect and block C2 communications by analyzing traffic patterns and comparing them to threat intelligence data. The guide specifically states: "Advanced solutions such as Firepower provide detection capabilities for command and control (C2) traffic by identifying unusual outbound connections and behavioral anomalies".

Dynamic malware analysis involves executing the malware in a controlled environment to observe its behavior, such as file creation, network traffic, or system modifications. A sandbox is designed for this purpose—it safely executes and monitors suspicious code without risking the host system. The other tools (Decompiler, Unpacker, Disassembler) are primarily used in static analysis.

Correct answer: D. Sandbox

—