GIAC logoGREM

GIAC Reverse Engineering Malware (GREM) practice exams

Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.

Exam code
GREM
Cost
$999USD
Questions
66questions
Duration
180minutes
Passing score
73percent
Level
Advanced
Valid for
4years
Study guide
How to prepare
Format
1proctored exam. GIAC lists GREM under its CyberLive hands-on testing format, and states that all GIAC exams are web based and required to be proctored, through ProctorU remotely or PearsonVUE onsite.

GREM practice exams

No complete practice exam yet. A form is 66 questions apportioned to the official weightings, and a partial one would report a score that means nothing, so none is assembled until the questions are there.

Open now
Nothing is published for GREM yet. The bank is being written from the official objectives.
Opens next
The first practice exam opens at 66 verified questions, spread across all 6 domains.

What the exam tests

Exam domains

GIAC publishes the GREM objectives as an unweighted list covering malware and behavioral analysis fundamentals, core reverse engineering concepts, static analysis, reversing functions in assembly, flow control and structures, malicious Office macros, PDFs and RTF files, obfuscated malware, anti-analysis and misdirection techniques, unpacking and debugging packed malware, common malware patterns, and .NET malware. It attaches no percentages. The six groupings above and their percentages are ours, a study aid rather than an official GIAC weighting, and GIAC does not endorse them.

The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.

6domains
  • Malware Analysis and Reverse Engineering Fundamentals22%
    0 verified
  • Assembly and Code Structures16%
    0 verified
  • Malicious Document Analysis18%
    0 verified
  • Anti-Analysis and Obfuscation18%
    0 verified
  • Unpacking and Debugging Packed Malware14%
    0 verified
  • Common Malware Patterns and .NET Malware12%
    0 verified

Open now. Nothing is published for GREM yet. The bank is being written from the official objectives.

Opens next. The first practice exam opens at 66 verified questions, spread across all 6 domains.

Every question here is checked against the official page it cites before it serves, which is why the count grows slowly.

Where to focus: GREM's 73 percent pass mark is among the highest GIAC sets, and the CyberLive items drop you into a debugger rather than a multiple choice list. Build a safe analysis VM and reverse real samples: recognising a packer or an anti-analysis check by its behaviour is faster under the clock than working it out from first principles.

What the exam actually asks you to do

A CyberLive exam. Some of the questions put you into a live machine with the real tools and score what you do there. GIAC does not publish how many of the 66 are hands-on, so neither do we.

Item formats

  • Multiple choice
  • Hands-on lab

The highlighted formats are the ones you cannot answer from memory alone. GIAC, GREM certification details

GIAC’s free resources

Study from the source. Everything below is published by the vendor, free to read, and is what our own questions are written from:

Official GREM exam page & objectives ↗

Keep reading

Every guide and cost breakdown, by vendor

Frequently asked questions

What does the GREM exam cost?

GIAC's pricing page lists a GIAC certification attempt at $999. The certification attempt can be bought on its own, without a training course.

Is the GREM exam hands-on?

GIAC tags GREM as a CyberLive certification. GIAC describes CyberLive as a hands-on format that replaces multiple choice with performance-based challenges in lab environments using virtual machines and real tools. The exam format section lists 1 proctored exam, 66 questions, 3 hours, and a minimum passing score of 73%.

Are there prerequisites for GREM?

GIAC's GREM page lists no prerequisite, though the material assumes comfort with assembly and a debugger. Under How To Prepare it points to training in a variety of modalities, practical work experience, and self study.