An incident response team suspects that an employee is exfiltrating data by hiding messages in images sent via email. The images appear normal to the eye, but the team wants to detect any hidden data. Which steganalysis approach should they use first?

Statistical analysis of pixel value distributions

Checking the file size against the original image size

Visual inspection of the images at high magnification

Reviewing email headers for unusual attachments

A forensic examiner is analyzing a set of images that are suspected to contain hidden data. The images are in PNG format and have been created by a steganography tool that uses LSB insertion. The examiner has limited time and needs to quickly identify which images are most likely to contain hidden data. Which approach is most efficient?

Manually inspect each image for visual anomalies

Check the file size of each image against the original

Use a hex editor to search for known steganographic signatures

Run a statistical analysis tool that calculates the chi-square statistic for each image

A cybersecurity team is monitoring network traffic for potential data exfiltration via steganography. They have a large volume of images to analyze. Which approach is most efficient for initial screening?

Use a hex editor to search for known steganographic signatures

Check the file size of each image against a baseline

Use automated steganalysis tools that perform statistical analysis on images

Manually inspect each image for visual anomalies

A security analyst is tasked with detecting hidden data in a set of audio files. The files are WAV format and the analyst suspects LSB steganography. Which steganalysis technique is most effective for this scenario?

Check the file size for any increase compared to the original

Analyze the waveform for unusual noise patterns in the least significant bits

Listen to the audio for any audible anomalies

Use a hex editor to look for appended data at the end of the file

A security architect is designing a steganographic system that must resist detection by both statistical and visual steganalysis. The system will transmit images over a lossy channel. Which combination of techniques is most effective?

Use a fixed embedding rate in the spatial domain without error correction

Use simple LSB insertion in the spatial domain with high embedding capacity

Use adaptive embedding in the frequency domain with error correction coding

Use a high embedding capacity in the frequency domain without error correction

EC-CouncilCertified Encryption Specialist

Domain 4Objective 4

Steganography and Steganalysis ECES Practice Questions (Page 6)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 26–30

26application · medium
An incident response team suspects that an employee is exfiltrating data by hiding messages in images sent via email. The images appear normal to the eye, but the team wants to detect any hidden data. Which steganalysis approach should they use first?
Select an answer first
27expert · medium
A forensic examiner is analyzing a set of images that are suspected to contain hidden data. The images are in PNG format and have been created by a steganography tool that uses LSB insertion. The examiner has limited time and needs to quickly identify which images are most likely to contain hidden data. Which approach is most efficient?
Select an answer first
28application · medium
A cybersecurity team is monitoring network traffic for potential data exfiltration via steganography. They have a large volume of images to analyze. Which approach is most efficient for initial screening?
Select an answer first
29application · medium
A security analyst is tasked with detecting hidden data in a set of audio files. The files are WAV format and the analyst suspects LSB steganography. Which steganalysis technique is most effective for this scenario?
Select an answer first
30expert · hard
A security architect is designing a steganographic system that must resist detection by both statistical and visual steganalysis. The system will transmit images over a lossy channel. Which combination of techniques is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.