ECCouncil Exam Questions

_____ is found in all versions of NTFS and is described as the ability to fork file data into existi

_____ is found in all versions of NTFS and is described as the ability to fork file data into existing files without affecting their functionality, size, or display to traditional file browsing utilities like dir or Windows Explorer

A.
Merge Streams

B.
Steganography

C.
Alternate Data Streams

D.
NetBIOS vulnerability

Explanation:
ADS (or Alternate Data Streams) is a “feature” in the NTFS file system that makes it possible to hide information in alternate data streams in existing files. The file can have multiple data streams and the data streams are accessed by filename :stream .