Bird
0
0

During disk image analysis, an investigator wants to find all JPEG files inside the image without altering it. Which approach is best?

hard🚀 Application Q15 of 15
Cybersecurity - Digital Forensics
During disk image analysis, an investigator wants to find all JPEG files inside the image without altering it. Which approach is best?
AEdit the disk image to add file extensions for easier search
BDelete non-JPEG files from the disk image to reduce size
CMount the disk image read-only and search for files by signature
DConvert the disk image to a compressed archive before searching
Step-by-Step Solution
Solution:

  1. Step 1: Preserve original disk image integrity

    Investigators must not alter the disk image to keep evidence valid, so read-only access is essential.

  2. Step 2: Search by file signature

    JPEG files have unique headers (signatures) that can be searched inside the mounted image without changing it.

  3. Final Answer:

    Mount the disk image read-only and search for files by signature -> Option C

  4. Quick Check:

    Read-only mount + signature search = safe analysis [OK]
Quick Trick: Always analyze disk images read-only to avoid evidence tampering [OK]
Common Mistakes:
MISTAKES
  • Editing image files which corrupts evidence
  • Deleting files from image mistakenly
  • Compressing image before analysis changes data

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Malware analysis basics - Quiz 3easy Advanced Threat Protection - Threat hunting techniques - Quiz 6medium Compliance and Governance - Security policy development - Quiz 6medium Compliance and Governance - HIPAA for healthcare data - Quiz 2easy Compliance and Governance - PCI DSS for payment data - Quiz 1easy Digital Forensics - Why forensics preserves evidence - Quiz 4medium Digital Forensics - Memory forensics basics - Quiz 12easy Emerging Security Topics - Quantum computing threats to cryptography - Quiz 11easy Emerging Security Topics - Blockchain security applications - Quiz 15hard Incident Response - Why incident response plans save organizations - Quiz 15hard