nerdexam
GIAC

GSLC · Question #406

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so…

The correct answer is A. Steganography. John is using steganography to hide a secret file inside an image so it bypasses the company's mail filtering controls.

Security Architecture & Engineering

Question

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress, Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail. Which of the following techniques is he performing to accomplish his task?

Options

  • ASteganography
  • BEmail spoofing
  • CSocial engineering
  • DWeb ripping

How the community answered

(34 responses)
  • A
    91% (31)
  • B
    3% (1)
  • D
    6% (2)

Why each option

John is using steganography to hide a secret file inside an image so it bypasses the company's mail filtering controls.

ASteganographyCorrect

Steganography is the practice of concealing data within a non-secret carrier file, such as an image, audio, or video file, so that the existence of the hidden message is not apparent. By embedding the secret file inside a JPEG image using a tool like image hide, John exploits the fact that mail servers inspect content type and metadata rather than scanning binary data embedded within image pixels. This allows the exfiltration to bypass signature-based email filters.

BEmail spoofing

Email spoofing involves forging the sender address of an email to impersonate another user or domain, which is not described in this scenario.

CSocial engineering

Social engineering manipulates people psychologically to divulge information or perform actions, not applicable here since John is using a technical concealment method.

DWeb ripping

Web ripping refers to copying an entire website's content for offline use, which has no relation to hiding data inside an image file.

Concept tested: Steganography as a data exfiltration technique

Source: https://www.nist.gov/publications/guide-media-sanitization

Topics

#steganography#data exfiltration#insider threat#covert channels

Community Discussion

No community discussion yet for this question.

Full GSLC Practice