Which NTFS feature allows data to be hidden inside a file's additional streams?

Prepare for the Penetration Testing and Vulnerability Analysis Test with a range of challenging questions. Study with multiple choice format, hints, and detailed explanations to ace your next exam!

Multiple Choice

Which NTFS feature allows data to be hidden inside a file's additional streams?

Explanation:
NTFS allows multiple data streams to be attached to a single file, so data can be stored in an alternate data stream alongside the main content. This makes it possible to hide data inside the same file, accessible via a name like file.txt:hidden or via specific tooling that lists or reads ADS. That hidden stream sits with the file but is not typically shown in standard views, which is why this feature is used for concealed data in a file. Hard links simply create additional directory entries that point to the same underlying data, so there aren’t extra streams involved. Compression reduces the size of the existing primary stream rather than adding new streams. Symbolic links are pointers to another file or location, not embedded streams within the file.

NTFS allows multiple data streams to be attached to a single file, so data can be stored in an alternate data stream alongside the main content. This makes it possible to hide data inside the same file, accessible via a name like file.txt:hidden or via specific tooling that lists or reads ADS. That hidden stream sits with the file but is not typically shown in standard views, which is why this feature is used for concealed data in a file.

Hard links simply create additional directory entries that point to the same underlying data, so there aren’t extra streams involved. Compression reduces the size of the existing primary stream rather than adding new streams. Symbolic links are pointers to another file or location, not embedded streams within the file.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy