ECCouncil Exam Questions

Which is found in all versions of NTFS and is described as the ability to fork file data into existi

_____ is found in all versions of NTFS and is described as the ability to fork file data into existing files without affecting their functionality, size, or display to traditional file browsing utilities like dir or Windows Explorer

A.
Steganography

B.
Merge Streams

C.
NetBIOS vulnerability

D.
Alternate Data Streams

Explanation:
ADS (or Alternate Data Streams) is a “feature” in the NTFS file system that makes it possible to hide information in alternate data streams in existing files. The file can have multiple data streams and the data streams are accessed by filename:stream.