Computer Hacking Forensic Investigator (CHFI) — Question 49

One technique for hiding information is to change the file extension from the correct one to one that might not be noticed by an investigator. For example,
[1]
extension?

Answer options

• A. the File Allocation Table
• B. the file header
• C. the file footer
• D. the sector map

Correct answer: B

Explanation

The correct answer is B, the file header, as it contains metadata about the file type and format, which can be altered through the file extension. Options A, C, and D refer to different structures that do not directly indicate the file type and are not typically changed to hide information.