In: Computer Science
What does it mean when you recover deleted information by looking at their headers and then reconstructing it?
a. |
Data recovery |
|
b. |
Recycle Bin |
|
c. |
Data carving (or others may call this file carving which is usually more common) |
QUESTION 2
What is the method used to hide data in graphic files?
a. |
Formatting |
|
b. |
Carving |
|
c. |
Masking |
|
d. |
Steganography |
QUESTION 3
What could be a CLUE that would indicate the person was using steganography?
a |
Multiple copies of a same graphic file |
|
b |
Graphic files of the same name but the different file size |
|
c |
Known steganography tools like S-Tools or Stegowatch found on the drive. |
|
d |
ALL OF THE ABOVE |
What does it mean when you recover deleted information by looking at their headers and then reconstructing it?
Answer: Option b) Recycle Bin
Explanation: The first place you should look after deleting a file is the Recycle Bin. It may seem a little obvious, but this back-up facility can be overlooked. If your file is in there, right-click it and select Restore from the menu. Of course, the Recycle Bin doesn’t catch every file deletion, with files that have been deleted in DOS being a particular oversight. QUESTION 1
QUESTION 2
What is the method used to hide data in graphic
files?
d) Steganography
Explanation: Insertion and Substitution methods do steganography programs use to hide data in graphics files
QUESTION 3
What could be a CLUE that would indicate the person was
using steganography?
Answer: Option d) ALL OF THE ABOVE
Explanation:
Some clues left on a drive that might indicate steganography include Multiple copies of a graphics file,Graphics files with the same name but different file sizes and S-Tools and Stegowatch in the suspect' s All Programs list