Which Windows feature is associated with alternate data streams?

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

Which Windows feature is associated with alternate data streams?

Explanation:
Alternate Data Streams are a capability of the NTFS file system that lets a file have more than one data stream. The primary stream holds the visible content, while additional streams can store extra data under separate names attached to the same file. These streams aren’t typically shown in normal directory listings, and you access them by specifying the file name with a colon and the stream name (for example, document.txt:notes). This is exactly what the term “alternate data streams” refers to, making it the correct association. The other options don’t describe a Windows feature for attaching extra data to a file: white space isn’t a named Windows feature; AFS is a different file system (not NTFS); slack space refers to unused disk space within clusters, not attached data streams.

Alternate Data Streams are a capability of the NTFS file system that lets a file have more than one data stream. The primary stream holds the visible content, while additional streams can store extra data under separate names attached to the same file. These streams aren’t typically shown in normal directory listings, and you access them by specifying the file name with a colon and the stream name (for example, document.txt:notes). This is exactly what the term “alternate data streams” refers to, making it the correct association. The other options don’t describe a Windows feature for attaching extra data to a file: white space isn’t a named Windows feature; AFS is a different file system (not NTFS); slack space refers to unused disk space within clusters, not attached data streams.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy