CompTIA Security+ (SY0-701) — Question 273
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?
Answer options
- A. Log data
- B. Metadata
- C. Encrypted data
- D. Sensitive data
Correct answer: B
Explanation
The correct answer is B, as metadata often includes details like geolocation coordinates associated with image files. Options A, C, and D do not accurately represent the type of information being sought, as log data is related to system events, encrypted data is secured and not directly accessible, and sensitive data encompasses a broader category beyond just metadata.