BlackFriday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 212-89 Topic 3 Question 69 Discussion

Actual exam question for Eccouncil's 212-89 exam
Question #: 69
Topic #: 3
[All 212-89 Questions]

An attacker after performing an attack decided to wipe evidences using artifact wiping techniques to evade forensic investigation. He applied magnetic field to the digital

media device, resulting in an entirely clean device of any previously stored data.

Identify the artifact wiping technique used by the attacker.

Show Suggested Answer Hide Answer
Suggested Answer: B

The technique described, where an attacker applies a magnetic field to a digital media device to clean it of any previously stored data, is known as disk degaussing. Degaussing is a method used to erase a disk or tape by exposing it to a strong magnetic field, destroying the magnetic data storage mechanism and leaving the device clean of any data. This process is effectively used for wiping digital evidence in a way that makes recovery impossible, serving as a method of anti-forensics. Unlike file wiping utilities or disk cleaning utilities, which overwrite or delete data (potentially leaving traces that can be recovered), degaussing physically alters the storage medium itself, making data recovery unfeasible. Reference: The ECIH v3 certification program discusses various artifact wiping techniques, including degaussing, as part of understanding anti-forensic methods that attackers use to evade detection and investigation.


Contribute your Thoughts:

Cathrine
14 days ago
Ha! This attacker must have watched too many spy movies. Wiping a device with a magnetic field? Talk about overkill. B is the answer, but I bet they're the type to use a sledgehammer to crack a nut.
upvoted 0 times
...
Lachelle
15 days ago
B, no doubt. Whoever this attacker is, they really know their stuff. Degaussing is the nuclear option when it comes to data destruction. Gotta respect the dedication to leaving no evidence behind.
upvoted 0 times
...
Earleen
16 days ago
Hmm, I'm torn between B and C. Disk cleaning utilities could also do the trick, but the question specifically mentions a magnetic field, so I'm leaning towards B. Better safe than sorry, right?
upvoted 0 times
...
Jerilyn
18 days ago
I'm going with B as well. Wiping a device with a magnetic field is a classic tactic used by the pros to cover their tracks. No trace left behind, just a clean slate.
upvoted 0 times
...
Adelina
19 days ago
Definitely B. Disk degaussing is the only way to completely wipe all data from a device. That's some serious James Bond-level stuff right there!
upvoted 0 times
Linwood
1 days ago
I agree, disk degaussing is the most effective way to wipe all data.
upvoted 0 times
...
...
Alishia
24 days ago
B is the right answer, no doubt. Though I wonder if the attacker considered using a hammer instead - they could have really 'smashed' the evidence that way.
upvoted 0 times
Jimmie
12 days ago
A) File wiping utilities
upvoted 0 times
...
...
Belen
1 months ago
Haha, I bet the attacker is kicking themselves for not using a microwave oven instead. That would have been a more 'shocking' way to wipe the evidence!
upvoted 0 times
Annabelle
1 days ago
B) Disk degaussing/destruction
upvoted 0 times
...
Shakira
6 days ago
A) File wiping utilities
upvoted 0 times
...
...
Talia
1 months ago
I'm not sure, but I think disk cleaning utilities could also be used for artifact wiping.
upvoted 0 times
...
Michal
1 months ago
I agree with Raul, disk degaussing/destruction would completely wipe the device.
upvoted 0 times
...
Raul
1 months ago
I think the attacker used disk degaussing/destruction.
upvoted 0 times
...
Hector
2 months ago
I'm going with B as well. Applying a strong magnetic field is a classic technique for erasing data beyond recovery.
upvoted 0 times
Malinda
6 days ago
Definitely the most effective method to ensure no traces are left behind.
upvoted 0 times
...
Detra
7 days ago
B) Disk degaussing/destruction
upvoted 0 times
...
Kayleigh
8 days ago
I agree, using a strong magnetic field is a sure way to wipe out all data.
upvoted 0 times
...
Roosevelt
9 days ago
B) Disk degaussing/destruction
upvoted 0 times
...
Tasia
10 days ago
D) Syscall proxying
upvoted 0 times
...
Moon
13 days ago
C) Disk cleaning utilities
upvoted 0 times
...
Alpha
15 days ago
B) Disk degaussing/destruction
upvoted 0 times
...
Pearly
25 days ago
A) File wiping utilities
upvoted 0 times
...
...
Valentine
2 months ago
Definitely B. Disk degaussing is the only way to completely wipe all data from a device. Anything else would leave traces behind.
upvoted 0 times
Ressie
1 months ago
Syscall proxying is not a method used for artifact wiping.
upvoted 0 times
...
Ming
1 months ago
File wiping utilities may not completely erase all traces of data.
upvoted 0 times
...
Desmond
1 months ago
Yes, disk degaussing destroys all data by applying a strong magnetic field.
upvoted 0 times
...
Elli
1 months ago
I agree, disk degaussing is the most effective way to wipe all data.
upvoted 0 times
...
...

Save Cancel