In the Master File Table of an NTFS disk, what type of file is represented by a colon followed by a name?

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

In the Master File Table of an NTFS disk, what type of file is represented by a colon followed by a name?

Explanation:
NTFS supports alternate data streams. When you see a colon followed by a name after a file, that indicates a named data stream attached to the file, i.e., an alternate data stream. This is used to store extra data under the same file name without creating a separate file entry. In the Master File Table, such a colon-named stream represents a data stream file (an ADS). Other options aren’t signaled by this colon notation; compression, encryption, or a “reserved” tag are separate file attributes or concepts, not indicated by a colon name.

NTFS supports alternate data streams. When you see a colon followed by a name after a file, that indicates a named data stream attached to the file, i.e., an alternate data stream. This is used to store extra data under the same file name without creating a separate file entry. In the Master File Table, such a colon-named stream represents a data stream file (an ADS). Other options aren’t signaled by this colon notation; compression, encryption, or a “reserved” tag are separate file attributes or concepts, not indicated by a colon name.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy