CNIT 420 STUDY GUIDE EXAM 2026/2027 QUESTIONS
AND SOLUTIONS RATED A+
✔✔The process of converting raw picture data to another format is referred to as -
✔✔demosaicing
✔✔This is commonly used to store digital pictures - ✔✔Exif
✔✔This is the standard for storing metadata in JPEG and TIF files - ✔✔Exif
✔✔This reduces the file size without removing data - ✔✔lossless compression
✔✔Examples of lossless compression - ✔✔GIF, PNG
✔✔This permanently discards bits of information - ✔✔lossy compression
✔✔Example of lossy compression - ✔✔JPEG
✔✔This determines what data to discard based on vectors in the graphics file -
✔✔Vector quantization
✔✔This is recovering any type of file fragments - ✔✔Carving, salvaging
✔✔Each graphics file has a - ✔✔unique header value
✔✔These hexadecimal header values are a standard for JPEG - ✔✔FFD8 followed by
label JFIF
✔✔Is metadata graphics a graphics file category? - ✔✔No
✔✔T/F Digital photos can be saved in two formats: Raw format and EXIF format, EXIF
format provides significant amount of metadata information about the photo - ✔✔True
✔✔T/F JPEG files are a great example of lossless compression - ✔✔False, they are
lossy
✔✔T/F Carving is a method of recovering files by recognizing header and footer
information at the bytes level - ✔✔True
✔✔False hits when carving data are called this - ✔✔false positives
✔✔T/F No one viewer program can read every file format - ✔✔True
, ✔✔Two major forms of steganography - ✔✔insertion, substitution
✔✔This is when hidden data is not displayed when viewing host file in its associated
program - ✔✔insertion
✔✔This is when bits are replaces in a host file with other bits of data and usually
changes the last two least significant bits - ✔✔substitution
✔✔Substitution can be detected with this - ✔✔steganalysis tools
✔✔T/F Good clues to look for when dealing with steganography:
Duplicate files with different hash values
Steganography programs installed on suspect's drive - ✔✔True
✔✔This can also be applied to audio and video files - ✔✔steganography
✔✔Steganography has been used to protect copyrighted material by having this -
✔✔digital watermarks
✔✔This is offered in advanced hex editors but is not available in digital forensics tools -
✔✔hashing specific files or sectors
✔✔These two tools provide MD5 and SHA-1 hashing algorithms - ✔✔WinHex and HxD
✔✔This is a process that builds a data set of hashes of sectors from the original file -
✔✔block-wise hashing
✔✔AccessData has its own hashing database called this - ✔✔Known File Filter (KFF)
✔✔This is the changing or manipulating of a file to conceal information - ✔✔data hiding
✔✔T/F These are techniques of data hiding:
Hiding entire partitions
Changing file extensions
Setting file attributes to hidden
Bit-shifting
Using encryption
Setting up password protection - ✔✔True
✔✔To decode an encrypted file users supply this - ✔✔password or passphrase
✔✔Many encryption programs use a technology called this - ✔✔key escrow
AND SOLUTIONS RATED A+
✔✔The process of converting raw picture data to another format is referred to as -
✔✔demosaicing
✔✔This is commonly used to store digital pictures - ✔✔Exif
✔✔This is the standard for storing metadata in JPEG and TIF files - ✔✔Exif
✔✔This reduces the file size without removing data - ✔✔lossless compression
✔✔Examples of lossless compression - ✔✔GIF, PNG
✔✔This permanently discards bits of information - ✔✔lossy compression
✔✔Example of lossy compression - ✔✔JPEG
✔✔This determines what data to discard based on vectors in the graphics file -
✔✔Vector quantization
✔✔This is recovering any type of file fragments - ✔✔Carving, salvaging
✔✔Each graphics file has a - ✔✔unique header value
✔✔These hexadecimal header values are a standard for JPEG - ✔✔FFD8 followed by
label JFIF
✔✔Is metadata graphics a graphics file category? - ✔✔No
✔✔T/F Digital photos can be saved in two formats: Raw format and EXIF format, EXIF
format provides significant amount of metadata information about the photo - ✔✔True
✔✔T/F JPEG files are a great example of lossless compression - ✔✔False, they are
lossy
✔✔T/F Carving is a method of recovering files by recognizing header and footer
information at the bytes level - ✔✔True
✔✔False hits when carving data are called this - ✔✔false positives
✔✔T/F No one viewer program can read every file format - ✔✔True
, ✔✔Two major forms of steganography - ✔✔insertion, substitution
✔✔This is when hidden data is not displayed when viewing host file in its associated
program - ✔✔insertion
✔✔This is when bits are replaces in a host file with other bits of data and usually
changes the last two least significant bits - ✔✔substitution
✔✔Substitution can be detected with this - ✔✔steganalysis tools
✔✔T/F Good clues to look for when dealing with steganography:
Duplicate files with different hash values
Steganography programs installed on suspect's drive - ✔✔True
✔✔This can also be applied to audio and video files - ✔✔steganography
✔✔Steganography has been used to protect copyrighted material by having this -
✔✔digital watermarks
✔✔This is offered in advanced hex editors but is not available in digital forensics tools -
✔✔hashing specific files or sectors
✔✔These two tools provide MD5 and SHA-1 hashing algorithms - ✔✔WinHex and HxD
✔✔This is a process that builds a data set of hashes of sectors from the original file -
✔✔block-wise hashing
✔✔AccessData has its own hashing database called this - ✔✔Known File Filter (KFF)
✔✔This is the changing or manipulating of a file to conceal information - ✔✔data hiding
✔✔T/F These are techniques of data hiding:
Hiding entire partitions
Changing file extensions
Setting file attributes to hidden
Bit-shifting
Using encryption
Setting up password protection - ✔✔True
✔✔To decode an encrypted file users supply this - ✔✔password or passphrase
✔✔Many encryption programs use a technology called this - ✔✔key escrow
