Computer Hacking Forensic Investigator (CHFI v10) — Question 212

In forensics ____________ are used to view stored or deleted data from both files and disk sectors.

Answer options

• A. Hex editors
• B. SIEM tools
• C. Hash algorithms
• D. Host interfaces

Correct answer: A

Explanation

Hex editors are specifically designed to manipulate and display the binary data of files and disk sectors, making them ideal for forensic analysis. SIEM tools aggregate and analyze security data, while hash algorithms are used for data integrity verification and not for viewing data. Host interfaces refer to the means by which devices communicate and do not pertain to data examination.