Computer Hacking Forensic Investigator (CHFI) — Question 32

One technique for hiding information is to change the file extension from the correct one to the one that might not be noticed by an investigator. For example,
[1]
extension?

Answer options

• A. The file header
• B. The File Allocation Table
• C. The file footer
• D. The sector map

Correct answer: A

Explanation

Changing the file extension affects the file header, which contains metadata that identifies the file type. The other options, such as the File Allocation Table, file footer, and sector map, do not directly pertain to how the file is recognized based on its extension.