Exam 312-49v10 All QuestionsBrowse all questions from this exam
Question 338

One technique for hiding information is to change the file extension from the correct one to the one that might not be noticed by an investigator. For example,

[1]

extension?

    Correct Answer: A

    The file header is the initial part of a file and contains metadata about the file type, format, and other attributes. Changing the file extension is a technique to obscure the file's true nature, but the actual format and type information are stored in the file header. By examining the file header, investigators can determine the real format of the file regardless of its extension.

Discussion
aqeel1506Option: A

A. The file header Here's why: File Header: This is the initial part of a file where metadata about the file type, format, and other attributes are stored. By changing the file extension, you might trick someone into misidentifying the file based on its name, but the actual file header contains the real format and type information. Investigators would need to examine the file header to determine the true nature of the file.