In the Master File Table of an NTFS disk, what type of file is represented by a colon followed by a name?

Study for the Computer Hacking Forensic Investigator (CHFI) v11 Test with flashcards and multiple choice questions. Each question comes with hints and explanations. Get ready to excel!

Multiple Choice

In the Master File Table of an NTFS disk, what type of file is represented by a colon followed by a name?

Explanation:
NTFS supports alternate data streams. When you see a colon followed by a name after a file, that indicates a named data stream attached to the file, i.e., an alternate data stream. This is used to store extra data under the same file name without creating a separate file entry. In the Master File Table, such a colon-named stream represents a data stream file (an ADS). Other options aren’t signaled by this colon notation; compression, encryption, or a “reserved” tag are separate file attributes or concepts, not indicated by a colon name.

NTFS supports alternate data streams. When you see a colon followed by a name after a file, that indicates a named data stream attached to the file, i.e., an alternate data stream. This is used to store extra data under the same file name without creating a separate file entry. In the Master File Table, such a colon-named stream represents a data stream file (an ADS). Other options aren’t signaled by this colon notation; compression, encryption, or a “reserved” tag are separate file attributes or concepts, not indicated by a colon name.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy