EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 5 : Defeating Anti-forensics Techniques
         
Questions available : 49 You are not logged in.
Please Login for track your learning progress
   
 
Q. No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
Go to Question No.



Question No 0

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.
 
   
Bookmark this Question
QID: 841  
   
When examining a file with a Hex Editor, what space does the file header occupy?


 
A:    the last several bytes of the file
 
B:    the first several bytes of the file
C:    none, file headers are contained in the FAT
  
D:    one byte at the beginning of the file
 
         

 
 

Diffence opinion in Correct Answer or any comment?
Vote / Comment for correct Answer



Comunity Comments:

Admin on 09/04/2025
Opted Answer: B
Answer choice updated
0 
0 

Deepti on 06/11/2024
Opted Answer: B
Unallocated space refers to the hard disk space that does not contain any file information but stores file data without the details of its location. Investigators can identify the files using certain characteristics such as file header (the first few bytes) and footer (the last few bytes).

Pg. 450

Also, File Headers of few file types:
jpeg: FF D8 FF E0
jpeg: FF D8 FF FE
png: 89 50 4E 47
gif: 47 49 46 38 39 61
gif: 47 49 46 38 37 61

Each Hex character is 4 Bits. If we consider majority of Headers they are 4 Byte long and gif is 6 Bytes.
1 
0 

Admin on 09/04/2025
Yes. You are right. Answer choice updated
0 
0 

Pradeep Thomas on 15/12/2024
Yes, You are right..
0 
0 

















WELCOME TO ONLINE EXAM PREPARATION SYSTEM

Certification Examinations