nerdexam
EC-Council

312-49 · Question #625

Which of the following file formats allows the user to compress the acquired data as well as keep it randomly accessible?

The correct answer is B. Generic Forensic Zip (gfzip). Generic Forensic Zip (gfzip) was specifically designed for digital forensics to support both data compression and random access simultaneously. Unlike standard formats such as gzip, which require sequential decompression from the beginning of the file, gfzip maintains an…

Submitted by thandi_sa· Apr 18, 2026Disk Forensics

Question

Which of the following file formats allows the user to compress the acquired data as well as keep it randomly accessible?

Options

  • AProprietary Format
  • BGeneric Forensic Zip (gfzip)
  • CAdvanced Forensic Framework 4
  • DAdvanced Forensics Format (AFF)

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    87% (26)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Generic Forensic Zip (gfzip) was specifically designed for digital forensics to support both data compression and random access simultaneously. Unlike standard formats such as gzip, which require sequential decompression from the beginning of the file, gfzip maintains an internal index that allows investigators to jump directly to any segment of the compressed image. This makes it storage-efficient while still enabling selective, on-demand retrieval of forensic data without decompressing the entire image.

Topics

#Forensic Imaging#File Formats#Data Compression#Random Access

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice