Which artifact is used to uniquely identify a detected file?

The correct answer is D. file hash. A file hash is a unique alphanumeric string generated by applying a hash function (such as MD5, SHA-1, SHA-256, etc.) to the content of a file. The hash value is unique to the file's content. Even a slight change in the file content will produce a significantly different hash…

Submitted by kim_seoul· Mar 6, 2026Host-Based Analysis

Question

Options

Afile timestamp
Bfile extension
Cfile size
Dfile hash

How the community answered

(52 responses)

A
4% (2)
B
2% (1)
D
94% (49)

Explanation

A file hash is a unique alphanumeric string generated by applying a hash function (such as MD5, SHA-1, SHA-256, etc.) to the content of a file. The hash value is unique to the file's content. Even a slight change in the file content will produce a significantly different hash value. Therefore, file hashes are commonly used to verify file integrity, identify files, and detect changes or alterations in files, making them a crucial aspect of file identification in security and forensics.

Topics

#file hash#digital forensics#malware analysis#file identification

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice