GCIH · Question #188
John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so…
The correct answer is B. Steganography. Steganography is the technique of concealing secret data inside an ordinary carrier file such as an image, so the hidden content is invisible to content-inspection systems like mail filters.
Question
John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress, Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail. Which of the following techniques is he performing to accomplish his task?
Options
- AEmail spoofing
- BSteganography
- CWeb ripping
- DSocial engineering
How the community answered
(36 responses)- A3% (1)
- B89% (32)
- C3% (1)
- D6% (2)
Why each option
Steganography is the technique of concealing secret data inside an ordinary carrier file such as an image, so the hidden content is invisible to content-inspection systems like mail filters.
Email spoofing involves forging the sender address or header fields to impersonate another identity, which has no relation to hiding data inside an image file.
John is performing steganography by using the 'image hide' tool to embed a secret file within a JPEG image file - the hidden data is encoded into the image's binary structure so it still renders as a normal photograph, allowing it to bypass the company mail server's content filters that cannot detect the concealed payload.
Web ripping refers to downloading or mirroring an entire website's content locally, which is unrelated to embedding secret data within a carrier image.
Social engineering uses psychological manipulation to deceive people into revealing information or taking actions, not a technical method of concealing data inside a file.
Concept tested: Steganography for covert data exfiltration via image files
Source: https://csrc.nist.gov/glossary/term/steganography
Topics
Community Discussion
No community discussion yet for this question.