Computer Hacking Forensic Investigator (CHFI v10) — Question 205

Jack is reviewing file headers to verify the file format and hopefully find more information of the file. After a careful review of the data chunks through a hex editor;
Jack finds the binary value 0xffd8ff. Based on the above information, what type of format is the file/image saved as?

Answer options

• A. BMP
• B. ASCII
• C. JPEG
• D. GIF

Correct answer: C

Explanation

The binary value 0xffd8ff is the signature for JPEG files, which is why C is the correct answer. The other options do not match this specific binary signature; BMP files typically begin with 'BM', ASCII is a character encoding standard, and GIF files start with 'GIF'.