Recovering Graphics Files

Question 1

The two major forms of steganography are insertion and substitution.

Answer 1

True

Question 2

How may computer programs can be registered under copyright laws?

Answer 2

As literary works

Question 3

What kind of images are based on mathematical instructions that define lines, curves, text, ovals, and other geometric shapes?

Answer 3

Vector Graphics

Question 4

Which JFIF format has a hexadecimal value of FFD8 FFE0 in the first four bytes?

Answer 4

JPEG

Question 5

Which term refers to a data-hiding technique that uses host files to cover the contents of a secret message?

Answer 5

Steganography

Question 6

What type of laws should computer investigators be especially aware of when working with image files in order to avoid infringement violations?

Answer 6

Copyright

Question 7

Which type of compression compresses data permanently by discarding bits of information in the file?

Answer 7

Lossy

Question 8

What technique has been used to protect copyrighted material by inserting digital watermarks into a file?

Answer 8

Steganography

Question 9

Which images store graphics information as grids of pixels?

Answer 9

Bitmap

Question 10

Which data-hiding technique replaces bits of the host file with other bits of data?

Answer 10

Substitution

Question 11

What is the process of converting raw picture data to another format called?

Answer 11

Demosaicing

Question 12

What is another term for steganalysis tools?

Answer 12

Steg tools

Question 13

A graphics program creates and saves one of three types of image files: bitmap, vector, or XIF.

Answer 13

False

Question 14

Bitmap images are collections of dots, or pixels, in a grid format that form a graphic.

Answer 14

True

Question 15

Under copyright laws, maps and architectural plans may be registered as pictorial, graphic, and sculptural works/

Answer 15

True

Question 16

If a graphics file cannot be opened in an image viewer, what should the next step be?

Answer 16

Examining the file’s header data

Question 17

Operating systems do not have tools for recovering image files

Answer 17

False

Question 18

If a graphics file is fragmented across areas on a disk, you must recover all the fragments before re-creating the file

Answer 18

True

Question 19

All TIF files start at position zero (offset 0 is the first byte of a file) with hexadecimal 49 49 3B

Answer 19

False

Question 20

Which data-hiding technique places data from the secret file into the host file without displaying the secret data when the host file is viewed in its associated program?

Answer 20

Insertion

Question 21

What is the simplest way to access a file header?

Answer 21

Use a hexadecimal editor

Question 22

From which file format is the image format XIF derived?

Answer 22

TIF

Question 23

What tools are used to create, modify, and save bitmap, vector, and metafile graphics?

Answer 23

Graphics editors

Question 24

The Internet is the best source for learning more about file formats and their extensions.

Answer 24

True

Question 25

In which format are most digital photographs stored?

Answer 25

EXIF

Question 26

A JPEG file is an example of a vector graphic.

Answer 26

False

Question 27

Digital pictures use data compression to accomplish which of the following goals?

Answer 27

Save space on a hard drive

Question 28

Some clues left on a drive that might indicate steganography include which of the following?

Answer 28

Steganography programs in the Suspect’s all programs list,
Graphics files with the same name but different sizes
Multiple copies of a graphics file

Question 29

Graphics files stored on a computer can’t be recovered after they are deleted

Answer 29

False

Question 30

In JPEG files, what’s the starting offset position for the JFIF label?

Answer 30

Offset 6

Question 31

When investigating graphics files, you should convert them into one standard format

Answer 31

False

Question 32

Each type of graphics file has a unique header containing information that distinguishes it from other types of graphics files

Answer 32

True

Question 33

To identify an unknown graphics file format you need to examine a copy of the unknown file with a hexadecimal editor to find the hex code for the first several bytes of the file

Answer 33

True

Question 34

Copyright laws don’t apply to Web sites

Answer 34

False

Question 35

Which of the following is true about JEPG and TIF files?

Answer 35

They have different values for the first 2 bytes of their file headers

Question 36

What type of compression uses an algorithm that allows viewing the graphics file without losing any portion of the data?

Answer 36

Lossless

Question 37

A JPEG file uses which type of compression?

Answer 37

Lossy

Question 38

The process of converting raw images to another format is called which of the following?

Answer 38

Demosaicing

Question 39

When viewing a file header, you need to include hexadecimal information to view the file

Answer 39

True

Question 40

Only one file format can compress graphics files

Answer 40

False

Question 41

When you carve a graphics file, recovering the image depends on which of the following skills?

Answer 41

Recognizing the pattern of the file header content

Question 42

What methods are used for digital watermarking?

Answer 42

Invisible modification of the LSBs in the file

Question 43

Bitmap (.bmp) files use which of the following types of compression?

Answer 43

Lossless

Question 44

What methods do steganography programs use to hide data in graphics files?

Answer 44

Either of the above