112-57: Threat Intelligence EssentialsDemo

By ECCouncil · Question Mode

QuestionQ60

Data Collection and Sources of Threat Intelligence

Which of the following data-acquisition formats supports compression using the Lempel-Ziv-Markov chain (LZMA) algorithm?

  • A Advanced Forensic Framework 4
  • B Advanced Forensics Format
  • C Proprietary Format
  • D Raw Format
Explanation

The AFF4 (Advanced Forensic Format 4) open forensic container standard defines several supported stream compression codecs for image segments, including zlib/deflate, Snappy, and LZMA (Lempel-Ziv-Markov chain). This distinguishes it from the original AFF format, which supported only zlib compression, and from raw/proprietary formats, which either use no standardized compression or vendor-specific schemes not based on LZMA.

Community Discussion

No comments yet. Be the first to start the discussion!