Computer Hacking Forensic Investigator (CHFI v10) — Question 542

One technique for hiding information is to change the file extension from the correct one to the one that might not be noticed by an investigator. For example,
[1]
extension?

Answer options

• A. The file header
• B. The File Allocation Table
• C. The file footer
• D. The sector map

Correct answer: A

Explanation

The correct answer is A, as the file header contains metadata that can be manipulated to disguise the true nature of the file. The other options, while relevant to file storage and structure, do not pertain to the modification of file extensions for obfuscation.