nerdexam
EC-Council

312-49V11 · Question #60

During a routine digital investigation, forensic analysts suspect that sensitive information may be hidden within seemingly innocuous files. Despite extensive scanning and analysis, they are unable…

The correct answer is D. Steganography. According to the CHFI v11 Anti-Forensics Techniques domain, steganography is a sophisticated method used by attackers to conceal sensitive or malicious information within seemingly normal files such as images, audio files, video files, or documents. Unlike encryption, which…

Defeating Anti-Forensics Techniques

Question

During a routine digital investigation, forensic analysts suspect that sensitive information may be hidden within seemingly innocuous files. Despite extensive scanning and analysis, they are unable to detect any abnormalities using conventional surveillance techniques. What technique might attackers use to hide sensitive information within seemingly normal files, making it difficult for forensic investigators to detect?

Options

  • ATrial obfuscation
  • BHiding data in file system structures
  • CFile extension mismatch
  • DSteganography

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    10% (4)
  • C
    5% (2)
  • D
    83% (33)

Explanation

According to the CHFI v11 Anti-Forensics Techniques domain, steganography is a sophisticated method used by attackers to conceal sensitive or malicious information within seemingly normal files such as images, audio files, video files, or documents. Unlike encryption, which makes data unreadable but visibly suspicious, steganography hides the existence of the data itself, making detection significantly more challenging during forensic analysis. In steganography, data is embedded into unused or less noticeable parts of a file--such as the least significant bits (LSB) of image pixels or audio samples--without noticeably altering the file's appearance or functionality. As a result, standard antivirus tools, intrusion detection systems, and basic forensic scans may not flag these files as suspicious. CHFI v11 highlights steganography as a common anti-forensic tactic used for covert data exfiltration, command-and-control communication, and storage of illegal or confidential information.

Topics

#steganography#anti-forensics#data hiding#covert channels

Community Discussion

No community discussion yet for this question.

Full 312-49V11 Practice