University:
Eastern Kentucky University
Course:
CSC 189 | Computing Concepts and Programming
Academic year:

2023
Views:

185

Pages:

2
Author:

Killian Mata

Guide to Computer Forensics and Investigations Ch. 8 Solutions-1 Chapter 8 Solutions Review Questions 1. Graphics files stored on a computer can’t be recovered after they are deleted. True or False? False 2. When you carve a graphics file, recovering the image depends on which of the following skills? c. Recognizing the pattern of the file header content 3. Explain how to identify an unknown graphics file format that your digital forensics tool doesn’t recognize. You need to examine a copy of the unknown file with a hexadecimal editor to find the hex code for the first several bytes of the file. Then you need to examine other known file types with similar or identical header values to see whether you can confirm its file type. 4. What type of compression uses an algorithm that allows viewing the graphics file without losing any portion of the data? lossless 5. When investigating graphics files, you should convert them into one standard format. True or False? False 6. Digital pictures use data compression to accomplish which of the following goals? (Choose all that apply.) a. Save space on a hard drive. d. Produce a file that can be e-mailed or posted on the Internet. 7. The process of converting raw images to another format is called which of the following? d. Demosaicing 8. In JPEG files, what’s the starting offset position for the JFIF label? c. Offset 6 9. Each type of graphics file has a unique header containing information that distinguishes it from other types of graphics files. True or False? True 10. Copyright laws don’t apply to Web sites. True or False? False 11. When viewing a file header, you need to include hexadecimal information to view the image. True or False? True 12. When recovering a file with ProDiscover, your first objective is to recover cluster values. True or False? True Guide to Computer Forensics and Investigations Ch. 8 Solutions-2 13. Bitmap (.bmp) files use which of the following types of compression? d. Lossless 14. A JPEG file uses which type of compression? b. Lossy 15. Only one file format can compress graphics files. True or False? False 16. A JPEG file is an example of a vector graphic. True or False? False 17. Which of the following is true about JPEG and TIF files? b. They have different values for the first 2 bytes of their file headers. 18. What methods do steganography programs use to hide data in graphics files? (Choose all that apply.) a. Insertion b. Substitution 19. Some clues left on a drive that might indicate steganography include which of the following? (Choose all that apply.) a. Multiple copies of a graphics file b. Graphics files with the same name but different file sizes c. Steganography programs in the suspect’s All Programs list 20. What methods are used for digital watermarking? b. Invisible modification of the LSBs in the file c. Layering visible symbols on top of the image