GCIH: GIAC Certified Incident Handler Q409 — Practice Question

QuestionQ409

Detecting Evasive and Post-Exploitation Techniques

Which endpoint-security bypass technique uses existing system tools rather than introducing an executable?

A Living Off the Land
B Code signing
C Compile After Delivery
D Ghostwriting

Explanation

Living off the land relies on legitimate tools and binaries already present on a system, reducing the need to add a separate executable.

Community Discussion

No comments yet. Be the first to start the discussion!