PrepSnap logoPrepSnap
Pass

Question

1.
2.
3.
4.
Answer (Detailed Solution Below)

Option 1 : In additional $DATA attributes inside the same MFT FILE record, one attribute per stream

Advertisement

Detailed Solution

सही उत्तर In additional $DATA attributes inside the same MFT FILE record, one attribute per stream है।

Key Points
Helpful?
PrepSnapprepsnap.in • Part -A

Question:

From a metadata-analysis standpoint, where does the content of an NTFS Alternate Data Stream actually reside? / मेटाडेटा-विश्लेषण की दृष्टि से NTFS Alternate Data Stream की सामग्री वास्तव में कहाँ रहती है?

1.
In additional $DATA attributes inside the same MFT FILE record, one attribute per stream
2.
In separate hidden files stored inside the $Recycle.Bin folder
3.
In the $Bitmap file, which tracks all stream contents cluster by cluster
4.
In reserved sectors of the volume boot area outside the filesystem

Correct Answer: In additional $DATA attributes inside the same MFT FILE record, one attribute per stream

Every stream of a file, including the default unnamed stream, is simply another $DATA attribute in that file's MFT record — which is why ADS is invisible to directory listings yet fully part of the file. / फाइल की हर स्ट्रीम उसी के MFT रिकॉर्ड में एक अतिरिक्त $DATA एट्रिब्यूट होती है; इसीलिए ADS डायरेक्टरी लिस्टिंग में दिखती नहीं। Option (b) is the trap — the Recycle Bin stores deleted files, not stream data.

Downloaded from PrepSnap (prepsnap.in)