Computer Forensics Chapter 8 Graphics

exif

What format was developed as a standard for storing metadata in image files?

metafile

What kind of graphics file combines bitmap and vector graphics types?

most significant bit (MSB)

When looking at a byte of information in binary, such as 11101100, what is the first bit on the left referred to as?

False

When you decompress data that uses a lossy compression algorithm, you regain data lost by compression.

BMP

Which graphics file format below is rarely compressed?

tga

Which of the following formats is not considered to be a standard graphics file format?

raster graphics

Which of the following is not a type of graphic file that is created by a graphics program?

.dxf

Which of the following is not considered to be a non-standard graphics file format?

Lossy compression

Permanently discards bits of information in the file to compress it.

FFE1

For EXIF JPEG files, the hexadecimal value starting at offset 2 is _____________.

FFD9

For all JPEG files, the ending hexadecimal marker, also known as the end of image (EOI), is ____________.

vector graphics

Graphics based on mathematics instructions to form lines, curves, text, and other geometrical shapes.

True

Graphics files are created and saved in a graphics editor, such as Microsoft Paint, Adobe Freehand MX, Adobe Photoshop, or Gnome GIMP.

metafile graphics

Graphics files that are combinations of bitmap and vector images.

16 bits

How many bits are required to create a pixel capable of displaying 65,536 different colors?

16,777,216

How many different colors can be displayed by a 24 bit colored pixel?

Vector Quantization

In simple terms, _____________ compression discards bits in much the same way rounding off decimal values discards numbers

nonstandard graphics file formats

Less common graphic file formats, including proprietary formats, newer formats, formats that most image viewers don't recognize, and old or obsolete formats.

False

Most digital cameras use the bitmap format to store photos.

.txt

ProDiscover adds a ________ extension automatically on all copied clusters the Recover Clusters function exports.

Lossless compression

Reduces the file size without removing data.

raw file format

Referred to as a digital negative, the _______ is typically used on many higher-end digital cameras.

Lzip

Select below the utility that is not a lossless compression utility:

lossless

The Lempel-Ziv-Welch (LZW) algorithm is used in _____________ compression

XIF

The _______ format is an image format produced by the Nuance PaperPort scanning program.

internet

The __________ is the best source for learning more about file formats and their extensions.

.psd

The _____________ format is a proprietary format used by Adobe Photoshop.

True

The first 3 bytes of an XIF file are exactly the same as a TIF file.

demosaicing

The process of converting raw picture data to another format is called _________________.

demosaicing

The process of converting raw picture data to another format, such as JPEG or TIF.

carving

The process of recovering file fragments that are scattered across a disk.

false positives

The results of keyword searches that contain the correct match but aren't relevant to the investigation.

1976 Copyright Act

What act defines precisely how copyright laws pertain to graphics?

jpeg

What file type starts at offset 0 with a hexidecimal value of FFD8?

pixels

Bitmap images store graphics information as grids of __________, short for "picture elements.

Exchangeable Image File (ExIF)

A file format the Japan Electronics and Information Technology Industries Association (JEITA) developed as a standard for storing metadata in JPEG or TIF files.

vector quantization (VQ)

A form of compression that uses an algorithm similar to rounding off decimal values to eliminate unnecessary bits of data.

FF D8 FF E0

A standard JFIF JPEG file has a header value of _________ from offset 0 and the label name JFIF starting at offset 6.

49 49 2A

All TIF files start at offset 0 with what 6 hexadecimal characters?

Substitution

replaces bits of a host file with other bits of data.

bitmap images

Collection of dots, or pixels, in a grid format that form a graphic.

raster images

Collections of pixels stored in rows rather than a grid, as with bitmap images, to make graphics easier to print; usually creates when a vector graphic is converted to a bitmap image.

True

Each graphics file type has a unique header value.

Insertion

placing data from a secret file into a host file.