Acrobat Reader is being targeted by a threat using process injection. Which feature of SONAR is sandboxing Acroread32.exe so that the threat is prevented from dropping its payload?
A) Commercial Application Detection
B) Suspicious Behavior Detection
C) System Change Events
D) Signature Based Detection

Question

Quizplus · Accepted Answer

Suspicious Behavior Detection in SONAR monitors applications for behaviors that are indicative of malicious activity, such as process injection, and can sandbox applications like Acroread32.exe to prevent threats from executing.

Acrobat Reader Is Being Targeted by a Threat Using Process