ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam
Go to Exam

Exam SY0-601 topic 1 question 570 discussion

Actual exam question from CompTIA's SY0-601
Question #: 570
Topic #: 1
[All SY0-601 Questions]

A security analyst discovers several jpg photos from a cellular phone during a forensics investigation involving a compromised system. The analyst runs a forensics tool to gather file metadata. Which of the following would be part of the images if all the metadata is still intact?

  • A. The GPS location
  • B. When the file was deleted
  • C. The total number of print jobs
  • D. The number of copies made
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by ApplebeesWaiter1122 at July 26, 2023, 7:40 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ApplebeesWaiter1122
Highly Voted 1 year, 9 months ago
Selected Answer: A
If all the metadata is still intact, one of the pieces of information that can be found in the image files is the GPS location. Many modern smartphones embed GPS location information (also known as geotags or geolocation data) into the metadata of photos taken by the phone's camera. This GPS location metadata records the latitude and longitude coordinates of the location where the photo was taken.
upvoted 7 times
...
Copmp
Most Recent 1 year, 9 months ago
Selected Answer: A
I did a capture the flag exercise many moons ago. Can confirm that "where the picture was taken" can be found in picture metadata. So A is correct. GPS location.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago