GREMGIAC Reverse Engineering Malware (GREM) practice exams
Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.
- Exam code
- GREM
- Cost
- $999USD
- Questions
- 66questions
- Duration
- 180minutes
- Passing score
- 73percent
- Level
- Advanced
- Valid for
- 4years
- Study guide
- How to prepare
- Sources
- 77official pages
- Format
- 1proctored exam. GIAC lists GREM under its CyberLive hands-on testing format, and states that all GIAC exams are web based and required to be proctored, through ProctorU remotely or PearsonVUE onsite.
GREM practice exams
2 full-length forms, 66 questions each, apportioned to the published domain weightings.
In a malicious PDF an analyst finds an action dictionary with an S key of Launch and an F entry pointing at an executable path. What does this action do?
The answer
Launches an application or opens a document
Checked against
opensource.adobe.com, checked September 2026A launch action launches an application or opens or prints a document.
What the exam tests
Exam domains
GIAC publishes the GREM objectives as an unweighted list covering malware and behavioral analysis fundamentals, core reverse engineering concepts, static analysis, reversing functions in assembly, flow control and structures, malicious Office macros, PDFs and RTF files, obfuscated malware, anti-analysis and misdirection techniques, unpacking and debugging packed malware, common malware patterns, and .NET malware. It attaches no percentages. The six groupings above and their percentages are ours, a study aid rather than an official GIAC weighting, and GIAC does not endorse them.
The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.
- Malware Analysis and Reverse Engineering Fundamentals22%32 verified
- Assembly and Code Structures16%24 verified
- Malicious Document Analysis18%26 verified
- Anti-Analysis and Obfuscation18%26 verified
- Unpacking and Debugging Packed Malware14%21 verified
- Common Malware Patterns and .NET Malware12%18 verified
Where to focus: GREM's 73 percent pass mark is among the highest GIAC sets, and the CyberLive items drop you into a debugger rather than a multiple choice list. Build a safe analysis VM and reverse real samples: recognizing a packer or an anti-analysis check by its behavior is faster under the clock than working it out from first principles.
What the exam actually asks you to do
A CyberLive exam. Some of the questions put you into a live machine with the real tools and score what you do there. GIAC does not publish how many of the 66 are hands-on, so neither do we.
Item formats
- Multiple choice
- Hands-on lab
The highlighted formats are the ones you cannot answer from memory alone. GIAC, GREM certification details ↗
Between sittings
The same bank the numbered forms are assembled from.
Quick Practice
Open now
All 147 verified questions, untimed, with the explanation after each answer.
Domain Drill
Open now
Every domain on its own, for the area a score report says is weakest.
Review Missed
Fills as you go
Re-asks the questions you got wrong. Nothing to review until you miss something.
GIAC’s free resources
Study from the source. The page below is free to read, and it is what our own questions are written from.
Official GREM exam page & objectives ↗Keep reading
- Free GREM practice test
10 original questions, playable now. No account, no card.
- GREM exam format
How many questions, how long, what the items look like, and how long it stays valid.
- GREM passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is GREM?
An honest difficulty read from the format, the clock and the weights.
Frequently asked questions
What does the GREM exam cost?
GIAC's pricing page lists a GIAC certification attempt at $999. The certification attempt can be bought on its own, without a training course.
Is the GREM exam hands-on?
GIAC tags GREM as a CyberLive certification. GIAC describes CyberLive as a hands-on format that replaces multiple choice with performance-based challenges in lab environments using virtual machines and real tools. The exam format section lists 1 proctored exam, 66 questions, 3 hours, and a minimum passing score of 73%.
Are there prerequisites for GREM?
GIAC's GREM page lists no prerequisite, though the material assumes comfort with assembly and a debugger. Under How To Prepare it points to training in a variety of modalities, practical work experience, and self study.