Machine-translated by Google. Questions are authored in English.
Top

Discussion

Which of the following refers to the way address data is read and stored ?

  • A.Offset
  • B.Slack
  • C.Endianness
  • D.Metadata

Answer: C

The way data is read and stored in memory is its endianness.

Endianness is the order of the bytes of a multi-byte value. Big-endian systems store the most significant byte at the lowest address; little-endian systems, such as x86 processors, store the least significant byte first. A forensic examiner must interpret raw hex accordingly, or dates, sizes and addresses decoded from a disk image will be wrong.

An offset is a position counted from the start of a file or disk. Slack is the unused space at the end of a cluster that may hold old data, and metadata is data about data, such as timestamps; none of them describes byte order.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.