CompTIA CASP+ (CAS-004) — Question 435

An analyst needs to evaluate all images and documents that are publicly shared on a website. Which of the following would be the best tool to evaluate the metadata of these files?

Answer options

• A. OllyDbg
• B. ExifTool
• C. Volatility
• D. Ghidra

Correct answer: B

Explanation

ExifTool is specifically designed for reading, writing, and editing metadata in image and document files, making it the best choice for this task. OllyDbg is a debugger for Windows applications, Volatility is for memory analysis, and Ghidra is a software reverse engineering tool, none of which are tailored for metadata evaluation.