In: Computer Science
What does it mean when you recover deleted information by looking at their headers and then reconstructing it?
| a. | 
 Data recovery  | 
|
| b. | 
 Recycle Bin  | 
|
| c. | 
 Data carving (or others may call this file carving which is usually more common)  | 
QUESTION 2
What is the method used to hide data in graphic files?
| a. | 
 Formatting  | 
|
| b. | 
 Carving  | 
|
| c. | 
 Masking  | 
|
| d. | 
 Steganography  | 
QUESTION 3
What could be a CLUE that would indicate the person was using steganography?
| a | 
 Multiple copies of a same graphic file  | 
|
| b | 
 Graphic files of the same name but the different file size  | 
|
| c | 
 Known steganography tools like S-Tools or Stegowatch found on the drive.  | 
|
| d | 
 ALL OF THE ABOVE  | 
What does it mean when you recover deleted information by looking at their headers and then reconstructing it?
Answer: Option b) Recycle Bin
Explanation: The first place you should look after deleting a file is the Recycle Bin. It may seem a little obvious, but this back-up facility can be overlooked. If your file is in there, right-click it and select Restore from the menu. Of course, the Recycle Bin doesn’t catch every file deletion, with files that have been deleted in DOS being a particular oversight. QUESTION 1
QUESTION 2
What is the method used to hide data in graphic
files?
d) Steganography
Explanation: Insertion and Substitution methods do steganography programs use to hide data in graphics files
QUESTION 3
What could be a CLUE that would indicate the person was
using steganography?
Answer: Option d) ALL OF THE ABOVE
Explanation:
Some clues left on a drive that might indicate steganography include Multiple copies of a graphics file,Graphics files with the same name but different file sizes and S-Tools and Stegowatch in the suspect' s All Programs list