CompTIA Security+ (SY0-601) — Question 615

An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?

Answer options

• A. Log data
• B. Metadata
• C. Encrypted data
• D. Sensitive data

Correct answer: B

Explanation

The correct answer is B, as metadata refers to the additional information associated with files, such as geolocation coordinates. Log data (A) pertains to record-keeping information, encrypted data (C) refers to data that has been transformed for security, and sensitive data (D) is a broader category that does not specifically describe the information sought about the image files.