A network security analyst is monitoring traffic and notices that the IP identification field in IPv4 headers is not incrementing as expected. The values appear to be random but follow a pattern that could encode data. Which steganographic technique is being used?

Hiding data in IP header fields

Whitespace manipulation in text

What does LSB insertion in image steganography involve?

Encrypting the entire image file with a secret key

Replacing the least significant bit of each pixel with a bit of the hidden message

Deleting the least significant bit plane to reduce file size

Adding a watermark to the image that is visible to the naked eye

A forensic examiner discovers that a suspect used steganography to hide illegal images inside innocuous-looking photos. The examiner is preparing a report for court. Which ethical and legal consideration is most important to address in the report?

The suspect's intent, because steganography is only illegal if the intent is malicious.

The legality of steganography in the jurisdiction, because it may be illegal to use it at all.

The ethical implications of using steganography, because it is always unethical.

The steganography technique used and how it was detected, to establish the reliability of the evidence.

EC-CouncilDigital Forensics Essentials

Domain 3Objective 3

Steganography and Data Hiding Techniques DFE Practice Questions (Page 1)

Part of the Defeating Anti-Forensics Techniques domain, which makes up ~13% of our current practice bank.

50questions here

10free pages

9concepts

Questions 1–5

1application · medium
A network security analyst is monitoring traffic and notices that the IP identification field in IPv4 headers is not incrementing as expected. The values appear to be random but follow a pattern that could encode data. Which steganographic technique is being used?
Select an answer first
2foundation · easy
Which text steganography technique uses invisible characters to encode data?
Select an answer first
3foundation · easy
What does LSB insertion in image steganography involve?
Select an answer first
4expert · hard
A forensic examiner discovers that a suspect used steganography to hide illegal images inside innocuous-looking photos. The examiner is preparing a report for court. Which ethical and legal consideration is most important to address in the report?
Select an answer first
5application · medium
A forensic examiner receives a JPEG image from a suspect's computer. The image appears normal, but the examiner suspects hidden data. The examiner runs a tool that analyzes the least significant bits of each color channel and finds that the distribution of LSB values is not random. Which technique is the examiner most likely detecting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DFE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.

Steganography and Data Hiding Techniques DFE Practice Questions (Page 1)

Questions 1–5

A network security analyst is monitoring traffic and notices that the IP identification field in IPv4 headers is not incrementing as expected. The values appear to be random but follow a pattern that could encode data. Which steganographic technique is being used?

Which text steganography technique uses invisible characters to encode data?

What does LSB insertion in image steganography involve?

A forensic examiner discovers that a suspect used steganography to hide illegal images inside innocuous-looking photos. The examiner is preparing a report for court. Which ethical and legal consideration is most important to address in the report?

Keep studying — Defeating Anti-Forensics Techniques