200-201 · Question #269
Refer to the exhibit. Where is the executable file?
The correct answer is C. MIME. In a file analysis report, the MIME type field is the primary indicator used to classify the format and nature of a file, including whether it is an executable.
Question
Refer to the exhibit. Where is the executable file?
Exhibit
Options
- Ainfo
- Btags
- CMIME
- Dname
How the community answered
(20 responses)- B5% (1)
- C95% (19)
Why each option
In a file analysis report, the MIME type field is the primary indicator used to classify the format and nature of a file, including whether it is an executable.
'Info' is a generic term and does not specify the precise field that identifies a file as executable in a structured report.
'Tags' are custom labels or categories assigned to a file, which may or may not include whether it's an executable, but it's not the primary technical identifier.
The MIME (Multipurpose Internet Mail Extensions) type is a standard that indicates the nature and format of a file. For an executable, the MIME type would classify it as such (e.g., application/x-msdownload, application/octet-stream for Windows executables), making it the definitive field to identify an executable file within a report.
'Name' refers to the file's filename, which can be misleading (e.g., a '.txt' file could contain executable code, or a '.exe' could be renamed) and doesn't inherently determine if the file is executable.
Concept tested: File type identification (MIME)
Source: https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types
Topics
Community Discussion
No community discussion yet for this question.
