Steganography and Data Hiding Techniques DFE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A forensic examiner is categorizing evidence files. One file is a JPEG image, another is a WAV audio file, and a third is a text document. The examiner wants to test each for hidden data using appropriate techniques. Which combination of techniques is correct for each file type?

   • ASpread spectrum analysis for the JPEG, LSB analysis for the WAV, and masking analysis for the text document.
   • BLSB analysis for the JPEG, echo hiding analysis for the WAV, and whitespace analysis for the text document.
   • CMasking analysis for the JPEG, whitespace analysis for the WAV, and echo hiding analysis for the text document.
   • DNetwork analysis for the JPEG, LSB analysis for the WAV, and spread spectrum analysis for the text document.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A forensic examiner is analyzing a BMP image that is suspected of containing hidden data. The examiner has two tools: Stegdetect and OpenStego. Stegdetect reports no hidden data, but the examiner notices that the image's color palette has an unusual distribution. Which action should the examiner take next?

   • AConclude that the image is clean because Stegdetect found nothing.
   • BUse OpenStego to extract hidden data without further analysis.
   • CPerform a manual statistical analysis of the color distribution to look for LSB anomalies.
   • DDelete the image because it is corrupted.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A forensic analyst is examining a USB drive from a suspect. The drive contains a text file that appears normal, but the analyst notices that some lines end with extra spaces and tabs. The analyst also sees that the drive has unallocated space. Which two techniques should the analyst investigate?

   • ANetwork steganography in the text file and file system steganography in the unallocated space.
   • BLSB insertion in the text file and echo hiding in the unallocated space.
   • CWhitespace manipulation in the text file and slack space in the unallocated area.
   • DMasking in the text file and spread spectrum in the unallocated space.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is considering using steganography to watermark internal documents. The legal team asks how steganography differs from cryptography in this context. Which explanation is most accurate?

   • ACryptography makes the document unreadable without a key, while steganography hides the watermark's existence within the document.
   • BCryptography is always legal, while steganography is always illegal.
   • CCryptography hides the document's existence, while steganography encrypts the content.
   • DCryptography is used for digital signatures, while steganography is used for encryption.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is reviewing a video file that was found on a suspect's device. The video appears to be a normal recording, but the analyst suspects that hidden data may be embedded in the video frames. Which steganographic technique is most likely being used?

   • AWhitespace manipulation
   • BVideo steganography using LSB insertion in frames
   • CAudio echo hiding
   • DNetwork packet timing
   Reveal Solution Discussion Select an answer first