Forensics-chapter 10
Salvaging a file is also known in North America by which of the following terms?
Carving
A JPEG file is an example of a vector graphic.
False
Only one file format can compress graphics files. True or False?
False
When viewing a file header, you need to include hexadecimal information to view the image. True or False?
True
Graphics images stored on a computer cannot be recovered after they are deleted.
False
Lossy data compression uses an algorithm that allows viewing the graphics file without losing any portion of the data.
False
When investigating graphics files, you should convert them into one standard format. True or False?
False
A JPEG file uses which type of compression?
Lossy
Some clues left on a drive that might indicate steganography was used could be:
Multiple copies of an image file, Image files , S-Tools and Stegowatch
In JPEG files, what's the starting offset position for the JFIF label?
Offset 6
Copyright laws do not apply to Web sites.
False
JPEG and TIF files:
Have different values for the first 2 bytes of their file headers
What methods do steganography programs use to hide data in graphics files? (Choose all that apply.)
Insertion, Substitution
What methods are used for digital watermarking?
Invisible modification of the LSBs in the file, Layering visible symbols on top of the image
Bitmap (.bmp) files use which of the following types of compression?
Lossless
Digital pictures use data compression to accomplish which of the following goals? (Choose all that apply.)
Save space on a hard drive., Produce a file that can be e-mailed or posted on the Internet
Each type of graphics file has a unique header containing information that distinguishes it from every other type of graphics files.true
True
The first step in identifying an unknown graphics file format that your computer doesn't recognize is examine a copy of the file with a hexadecimal editor to find the hex code for the first several bytes of the file.
True
When recovering a file with ProDiscover, your first objective is to recover cluster values. True or False?
True
When you carve an image file, recovering the image depends on which of the following skills?
recognizing the pattern of the header content
