Defeating Anti-Forensics Techniques
6 practice questions under this official exam objective (312-49v10), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
6 total · page 1 of 1How Should an Investigator Examine a Password-Protected Packed Executable?
This question tests how a malware forensic investigator handles a suspicious executable that is packed with a known program packer and protected by a
Steganalysis for Steganography Attack Detection
Determines the most effective steganalysis method when an attacker knows detection techniques, identifying Known-stego attack as the correct answer. T
Known-stego Attack in Steganalysis
This question defines a Known-stego attack in steganalysis, where the analyst possesses both the original cover object and the stego-object to analyze
Analyzing Password-Protected Packed Executables
Determines the correct initial step for analyzing malicious executables protected by password-based packers. Establishes that mounting compound files
Decrypting Password-Protected Packed Files in Forensics
This question addresses the critical prerequisite step of decrypting password protection before unpacking malicious files during a computer forensics
Identifying Packers Used on Acquired Malware
When an investigator acquires packed software, one of the first triage steps is identifying which packer, cryptor, or compiler produced the binary, be