EC-Council
312-49V11 · Question #128
312-49V11 Question #128: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #128. The question stem and answer options stay visible for context.
Question
John, a forensic examiner, has been tasked with analyzing an evidence image file acquired from a suspect machine. While conducting his investigation, he discovered a file that appeared to be suspicious. He opened the file in a Hex Editor and found the hex value of the file starting with "89 50 4E". Based on his analysis, which file type does this hex value correspond to?
Options
- APDF
- BJPEG
- CBMP
- DPNG
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.