Which approach is a static analysis technique for detecting malicious content in a PDF file?

Opening the PDF in a sandboxed viewer and monitoring for network connections

Using a honeypot to observe exploitation attempts against a vulnerable reader

Scanning the file with a YARA rule that matches suspicious JavaScript patterns

Executing the PDF with a debugger to trace API calls

GIAC Reverse Engineering Malware

Domain 4Objective 2

Analyzing Malicious PDFs GREM Practice Questions (Page 8)

Part of the Document and File Analysis domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 36–36

36foundation · easy
Which approach is a static analysis technique for detecting malicious content in a PDF file?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GREM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GREM” is a trademark of its owner, used for identification only.

Analyzing Malicious PDFs GREM Practice Questions (Page 8)

Questions 36–36

Which approach is a static analysis technique for detecting malicious content in a PDF file?

Keep studying — Document and File Analysis