Defeating Anti-Forensics Techniques
3 practice questions under this official exam objective (312-49v10) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
How Should an Investigator Examine a Password-Protected Packed Executable?
This question tests how a malware forensic investigator handles a suspicious executable that is packed with a known program packer and protected by a
Known-stego Attack in Steganalysis
This question defines a Known-stego attack in steganalysis, where the analyst possesses both the original cover object and the stego-object to analyze
Identifying Packers Used on Acquired Malware
When an investigator acquires packed software, one of the first triage steps is identifying which packer, cryptor, or compiler produced the binary, be