Eccouncil 212-89 Exam - Topic 3 Question 69 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 69
Topic #: 3

An attacker after performing an attack decided to wipe evidences using artifact wiping techniques to evade forensic investigation. He applied magnetic field to the digital

media device, resulting in an entirely clean device of any previously stored data.

Identify the artifact wiping technique used by the attacker.

AFile wiping utilities

BDisk degaussing/destruction

CDisk cleaning utilities

DSyscall proxying

Show Suggested Answer

Suggested Answer: B

The technique described, where an attacker applies a magnetic field to a digital media device to clean it of any previously stored data, is known as disk degaussing. Degaussing is a method used to erase a disk or tape by exposing it to a strong magnetic field, destroying the magnetic data storage mechanism and leaving the device clean of any data. This process is effectively used for wiping digital evidence in a way that makes recovery impossible, serving as a method of anti-forensics. Unlike file wiping utilities or disk cleaning utilities, which overwrite or delete data (potentially leaving traces that can be recovered), degaussing physically alters the storage medium itself, making data recovery unfeasible. Reference: The ECIH v3 certification program discusses various artifact wiping techniques, including degaussing, as part of understanding anti-forensic methods that attackers use to evade detection and investigation.

by Vincent at Sep 19, 2024, 09:02 AM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Theresia

3 months ago

Wait, can a magnetic field really wipe everything? Sounds too good to be true.

upvoted 0 times

...

Cory

3 months ago

Agreed, B is the correct answer!

upvoted 0 times

...

Josefa

3 months ago

B seems right, but isn't it a bit extreme?

upvoted 0 times

...

Dorothea

4 months ago

I thought file wiping utilities were more common for this?

upvoted 0 times

...

Caprice

4 months ago

Definitely B, disk degaussing is the way to go for wiping data.

upvoted 0 times

...

Lisbeth

4 months ago

I thought disk cleaning utilities were more about optimizing space rather than completely wiping data. Degaussing sounds like the right answer here.

upvoted 0 times

...

Lasandra

4 months ago

I feel like we had a practice question on this! Degaussing was mentioned as a method to physically destroy data on magnetic media.

upvoted 0 times

...

Otis

4 months ago

I’m not entirely sure, but I think file wiping utilities just delete files without making them unrecoverable. Degaussing seems more effective for complete data removal.

upvoted 0 times

...

Alyce

5 months ago

I remember studying about degaussing in our cybersecurity class; it’s when you use a magnetic field to erase data, right?

upvoted 0 times

...

Marnie

5 months ago

This is a tricky one, but I'm pretty confident the answer is B. Disk degaussing/destruction makes the most sense based on the information given about the magnetic field being used to wipe the device.

upvoted 0 times

...

Dierdre

5 months ago

I'm a little confused by this question. The options don't seem to match up perfectly with the details provided. I'll have to re-read it a few times and see if I can figure out the right technique they used.

upvoted 0 times

...

Tegan

5 months ago

Hmm, I'm not totally sure about this one. The question talks about "artifact wiping techniques" but I'm not familiar with all the different methods. I'll have to think this through carefully.

upvoted 0 times

...

Serina

5 months ago

This one seems pretty straightforward. The question mentions the attacker used a magnetic field to wipe the device, so I'm going with option B, Disk degaussing/destruction.

upvoted 0 times

...

Joesph

5 months ago

Okay, I think I've got it. The attacker used a magnetic field to wipe the device, which means they likely used a degaussing tool or process to completely erase the data. That's got to be option B.

upvoted 0 times

...

Cathrine

1 year ago

Ha! This attacker must have watched too many spy movies. Wiping a device with a magnetic field? Talk about overkill. B is the answer, but I bet they're the type to use a sledgehammer to crack a nut.

upvoted 0 times

...

Lachelle

1 year ago

B, no doubt. Whoever this attacker is, they really know their stuff. Degaussing is the nuclear option when it comes to data destruction. Gotta respect the dedication to leaving no evidence behind.

upvoted 0 times

...

Earleen

1 year ago

Hmm, I'm torn between B and C. Disk cleaning utilities could also do the trick, but the question specifically mentions a magnetic field, so I'm leaning towards B. Better safe than sorry, right?

upvoted 0 times

...

Jerilyn

1 year ago

I'm going with B as well. Wiping a device with a magnetic field is a classic tactic used by the pros to cover their tracks. No trace left behind, just a clean slate.

upvoted 0 times

...

Adelina

1 year ago

Definitely B. Disk degaussing is the only way to completely wipe all data from a device. That's some serious James Bond-level stuff right there!

upvoted 0 times

Dolores

1 year ago

Yeah, disk degaussing is definitely the way to go for complete data wiping.

upvoted 0 times

...

Marva

1 year ago

I've heard that even file wiping utilities can leave traces behind.

upvoted 0 times

...

Kallie

1 year ago

It's like something out of a spy movie, very high-tech.

upvoted 0 times

...

Linwood

1 year ago

I agree, disk degaussing is the most effective way to wipe all data.

upvoted 0 times

...

Alishia

1 year ago

B is the right answer, no doubt. Though I wonder if the attacker considered using a hammer instead - they could have really 'smashed' the evidence that way.

upvoted 0 times

Renea

1 year ago

C) Disk cleaning utilities

upvoted 0 times

...

Leatha

1 year ago

B) Disk degaussing/destruction

upvoted 0 times

...

Jimmie

1 year ago

A) File wiping utilities

upvoted 0 times

...

Belen

1 year ago

Haha, I bet the attacker is kicking themselves for not using a microwave oven instead. That would have been a more 'shocking' way to wipe the evidence!

upvoted 0 times