nerdexam
GIAC

GREM · Question #95

In the analysis of a suspicious Office file's macro, which of the following elements would be crucial to investigate? (Choose Three)

The correct answer is A. The execution flow of the macro. C. Any obfuscated strings within the macro. E. Auto-execution triggers within the macro. See the full explanation below for the reasoning.

Question

In the analysis of a suspicious Office file's macro, which of the following elements would be crucial to investigate? (Choose Three)

Options

  • AThe execution flow of the macro.
  • BThe digital signature status of the document.
  • CAny obfuscated strings within the macro.
  • DThe presence of user interaction prompts.
  • EAuto-execution triggers within the macro.

How the community answered

(47 responses)
  • A
    72% (34)
  • B
    11% (5)
  • D
    17% (8)

Community Discussion

No community discussion yet for this question.

Full GREM Practice