In the Master File Table of an NTFS disk, what type of file is represented by a colon followed by a name?

Enhance your knowledge as a Computer Hacking Forensic Investigator with the CHFI v11 Test. Use flashcards and multiple-choice questions, complete with hints and detailed explanations, to prepare effectively and ace your exam!

Multiple Choice

In the Master File Table of an NTFS disk, what type of file is represented by a colon followed by a name?

Explanation:
NTFS supports alternate data streams. When you see a colon followed by a name after a file, that indicates a named data stream attached to the file, i.e., an alternate data stream. This is used to store extra data under the same file name without creating a separate file entry. In the Master File Table, such a colon-named stream represents a data stream file (an ADS). Other options aren’t signaled by this colon notation; compression, encryption, or a “reserved” tag are separate file attributes or concepts, not indicated by a colon name.

NTFS supports alternate data streams. When you see a colon followed by a name after a file, that indicates a named data stream attached to the file, i.e., an alternate data stream. This is used to store extra data under the same file name without creating a separate file entry. In the Master File Table, such a colon-named stream represents a data stream file (an ADS). Other options aren’t signaled by this colon notation; compression, encryption, or a “reserved” tag are separate file attributes or concepts, not indicated by a colon name.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy