nerdexam
EC-Council

212-82 · Question #36

A text file containing sensitive information about the organization has been leaked and modified to bring down the reputation of the organization. As a safety measure, the organization did contain the

The correct answer is B. Yes. Option B (Yes) is correct because when you compute the MD5 hash of the leaked "Sensitiveinfo.txt" file and compare it against the stored hash in "OriginalFileHash.txt," the two values will not match - confirming that the file's contents have been altered. MD5 hashing works as a d

Submitted by khalil_dz· Mar 6, 2026Data Security for Cloud

Question

A text file containing sensitive information about the organization has been leaked and modified to bring down the reputation of the organization. As a safety measure, the organization did contain the MD5 hash of the original file. The file which has been leaked is retained for examining the integrity. A file named "Sensitiveinfo.txt" along with OriginalFileHash.txt has been stored in a folder named Hash in Documents of Attacker Machine-1. Compare the hash value of the original file with the leaked file and state whether the file has been modified or not by selecting yes or no.

Options

  • ANo
  • BYes

How the community answered

(30 responses)
  • A
    17% (5)
  • B
    83% (25)

Explanation

Option B (Yes) is correct because when you compute the MD5 hash of the leaked "Sensitiveinfo.txt" file and compare it against the stored hash in "OriginalFileHash.txt," the two values will not match - confirming that the file's contents have been altered. MD5 hashing works as a digital fingerprint: even a single character change in a file produces a completely different hash value, making tampering immediately detectable.

Option A (No) is incorrect because it would only be valid if both hash values were identical, which would indicate the file remained untouched; since the scenario explicitly states the file was modified and leaked, the hashes will differ.

Memory Tip: Think of MD5 hashes as a wax seal on an envelope - if anyone opens and reseals it, the seal breaks and looks different. If the hash values match = seal intact = file unchanged; if hashes differ = seal broken = file tampered. In integrity verification scenarios on exams, a leaked and modified file will always produce a mismatched hash.

Topics

#File Integrity Monitoring#Hashing#MD5#Data Tampering Detection

Community Discussion

No community discussion yet for this question.

Full 212-82 Practice