GIAC
GREM · Question #95
GREM Question #95: Real Exam Question with Answer & Explanation
The correct answer is A. The execution flow of the macro. C. Any obfuscated strings within the macro. E. Auto-execution triggers within the macro.. See the full explanation below for the reasoning.
Question
In the analysis of a suspicious Office file's macro, which of the following elements would be crucial to investigate? (Choose Three)
Options
- AThe execution flow of the macro.
- BThe digital signature status of the document.
- CAny obfuscated strings within the macro.
- DThe presence of user interaction prompts.
- EAuto-execution triggers within the macro.
Community Discussion
No community discussion yet for this question.