CFP Forensic Image Metadata & Authentication

Question 1

What does EXIF data embedded in a forensic photograph typically contain?

Accepted Answer

Camera make/model, date/time, GPS coordinates, and camera settings

Answer

EXIF (Exchangeable Image File Format) data stores technical metadata including camera make/model, date/time of capture, GPS location, aperture, shutter speed, and ISO.

Question 2

Which cryptographic function is most commonly used to verify the integrity of forensic digital images?

Accepted Answer

MD5 or SHA-256 hash algorithm

Answer

MD5 and SHA-256 are hash algorithms that generate a unique fixed-length value from image data; any alteration to the file changes its hash, detecting tampering.

Question 3

What is the primary purpose of computing a hash value immediately after capturing forensic images?

Accepted Answer

To establish a baseline for detecting any subsequent alterations to the file

Answer

Computing a hash immediately after capture creates a baseline value; if the image is later altered, its recalculated hash will differ, proving tampering occurred.

Question 4

Which file format is generally preferred for storing forensic photographs because it preserves all original data without lossy compression?

Accepted Answer

RAW or TIFF, because they use lossless or no compression

Answer

RAW and TIFF formats use lossless or no compression, preserving all original pixel data and embedded metadata, making them the preferred choice for forensic documentation.

Question 5

What term describes the chronological record documenting who possessed forensic photographic evidence and when?

Accepted Answer

Chain of custody

Answer

Chain of custody is the chronological documentation showing who collected, handled, transferred, and examined evidence, ensuring its integrity and admissibility in court.

(CFP) Certified Forensic Photographer Practice Test

(CFP) Certified Forensic Photographer Practice Test

CFP Forensic Image Metadata & Authentication