Chapter 08: Recovering Graphics Files

Bitmap images are collections of dots, or pixels, in a grid format that form a graphic.

True

Operating systems do not have tools for recovering image files.

False

If a graphics file is fragmented across areas on a disk, you must recover all the fragments before re-creating the file.

True

With many computer forensics tools, you can open files with external viewers.

True

Steganography cannot be used with file formats other than image files.

False

____ are based on mathematical instructions that define lines, curves, text, ovals, and other geometric shapes.

A. Bitmap images C. Vector Graphics

B. Metafile graphics D. Line-art images

Vector graphics

You use ____ to create, modify, and save bitmap, vector, and metafile graphics.

A. Graphic viewers B, Image Readers

C. Image Viewers D. Line - art images

graphics editor

____ images store graphics information as grids of pixels.

A. Bitmap B, Image readers

C.Image Viewers D. Graphic editors

Bitmap

The process of converting raw picture data to another format is referred to as ____.
A. Abstracting B. Rastering

C. Demosaicing D. Rendering

demosaicing

Most digital photographs are stored in the ____ format.

A. EXIF B. TUFF

C. PNG D. GIF

EXIF

____ compression compresses data by permanently discarding bits of information in the file.

A. Redundant B. Lossy

C. Huffman D. Lossless

Lossy

Recovering fragments of a file is called ____.

A. Carving B. Slacking

C. Saving D. Rebuilding

carving

The JFIF ____ format has a hexadecimal value of FFD8 FFE0 in the first four bytes.

A. EPS B. BMP

C. GIF D. JPEG

JPEG

If you can't open a graphics file in an image viewer, the next step is to examine the file's ____.

A. files extension B. File name

C. File header data D. File size

header data

The uppercase letter ____ has a hexadecimal value 41.

A. “A” B. “B”

C. “G” D. “Z”

"A"

The image format XIF is derived from the more common ____ file format.

A. GIF B. JPEG

C. BMP D. TIF

TIF

The simplest way to access a file header is to use a(n) ____ editor

A. Hexadecimal editor B. Image editor

C. Use a disk editor D. Use a text editor

hexadecimal

The ____ header starts with hexadecimal 49 49 2A and has an offset of four bytes of 5C 01 00 00 20 65 58 74 65 6E 64 65 64 20 03.

A. TIFF B. XIF

C. JPEG D. GIF

XIF

____ is a data-hiding technique that uses host files to cover the contents of a secret message.

A. Steganography B. Steganalysis

C. Graphie D. Steganos

Steganography

____ steganography places data from the secret file into the host file without displaying the secret data when you view the host file in its associated program.

A. Replacement B. Pixelation

C. Substitution D. Insertion

Insertion

____ steganography replaces bits of the host file with other bits of data.

A. Insertion B. Replacement

C. Substitution D. Pixelation

Substitution

Steganalysis tools are also called ____.

A. Image editors B. Image tools

C. Hexadecimal editors D. Steg tools

steg tools

____ has been used to protect copyrighted material by inserting digital watermarks into a file.

A. Encryption B. Steganography

C. Compression D. Archiving

Steganography

When working with image files, computer investigators also need to be aware of ____ laws to guard against copyright violations.

A. International B. Forensics

C. Copyright D. Civil

copyright

Under copyright laws, computer programs may be registered as ____.

A. Literary works B. Motion pictures

C. Architectural works D. Audiovisual lyrics

literary works

Under copyright laws, maps and architectural plans may be registered as pictorial, graphic, and sculptural works.

True

A graphics program creates and saves one of three types of image files: bitmap, vector, or XIF.

False

The Internet is the best source for learning more about file formats and their extensions.

True

All TIF files start at position zero (offset 0 is the first byte of a file) with hexadecimal 49 49 3B.

False

The two major forms of steganography are insertion and substitution.

True