Question
A security analyst received a malicious binary file to analyze. Which of the following is the best technique to perform the analysis?
- A. Code analysis
- B. Static analysis
- C. Reverse engineering Correct
- D. Fuzzing
Explanation
A compiled binary has no readable source code, so understanding what it does requires reverse engineering: disassembling or decompiling it and observing its behavior to recover its logic. Static analysis is one part of that work but on its own only inspects the file without revealing its full behavior, code analysis assumes access to source code, and fuzzing feeds malformed input to find bugs rather than analyzing malware.
