Which Windows feature is associated with alternate data streams?

Enhance your knowledge as a Computer Hacking Forensic Investigator with the CHFI v11 Test. Use flashcards and multiple-choice questions, complete with hints and detailed explanations, to prepare effectively and ace your exam!

Multiple Choice

Which Windows feature is associated with alternate data streams?

Explanation:
Alternate Data Streams are a capability of the NTFS file system that lets a file have more than one data stream. The primary stream holds the visible content, while additional streams can store extra data under separate names attached to the same file. These streams aren’t typically shown in normal directory listings, and you access them by specifying the file name with a colon and the stream name (for example, document.txt:notes). This is exactly what the term “alternate data streams” refers to, making it the correct association. The other options don’t describe a Windows feature for attaching extra data to a file: white space isn’t a named Windows feature; AFS is a different file system (not NTFS); slack space refers to unused disk space within clusters, not attached data streams.

Alternate Data Streams are a capability of the NTFS file system that lets a file have more than one data stream. The primary stream holds the visible content, while additional streams can store extra data under separate names attached to the same file. These streams aren’t typically shown in normal directory listings, and you access them by specifying the file name with a colon and the stream name (for example, document.txt:notes). This is exactly what the term “alternate data streams” refers to, making it the correct association. The other options don’t describe a Windows feature for attaching extra data to a file: white space isn’t a named Windows feature; AFS is a different file system (not NTFS); slack space refers to unused disk space within clusters, not attached data streams.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy