MENU
Adam, a malicious hacker, hides a hacking tool from a system administrator of his company by using Alternate Data Streams (ADS) feature. Which of the following statements is true in context with the above scenario?
Suggested Answer: C
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
AN
Annamaria
10 months ago
Adam must be using NTFS, that's the only way it works.
GE
Gerardo
11 months ago
Surprised people still think ADS is Linux-related!
LA
Latrice
11 months ago
Windows 98? No way, that's outdated for ADS.
ET
Ettie
11 months ago
Totally agree, it's definitely NTFS!
CA
Caprice
11 months ago
ADS is a feature of NTFS, not Linux.
NI
Nicolette
11 months ago
I vaguely recall something about FAT not supporting ADS either. So, C doesn't seem correct to me.
KR
Kris
12 months ago
I thought Windows 98 didn't support ADS, so B seems unlikely. I think it has to be NTFS for this to work.
DY
Dyan
12 months ago
I'm a bit unsure, but I feel like ADS isn't something you find in Linux. Wasn't there a question about file systems in our practice tests?
GL
Glory
12 months ago
I remember ADS is specifically a feature of NTFS, so I think D might be the right answer.
KI
Kirk
1 year ago
This seems straightforward to me. Alternate Data Streams is a Windows NTFS feature, not a Linux one. So the correct answer has to be D.
AV
Avery
1 year ago
I'm a bit unsure about this one. I know Alternate Data Streams can be used to hide files, but I'm not sure if it's a Linux or Windows feature. I'll have to review my notes on file systems before answering.
LI
Lillian
1 year ago
Okay, I've got this. Alternate Data Streams is a Windows feature, not Linux. And since the question mentions the hacker is using it, the file system must be NTFS, not FAT. So the answer is D.
KE
Kenneth
1 year ago
Hmm, I'm a bit confused here. I know Alternate Data Streams is used to hide files, but I'm not sure which operating system it's specific to. I'll have to think this through carefully.
LI
Lili
1 year ago
I'm pretty sure Alternate Data Streams is a feature of NTFS, not Linux. So I'm going to go with option D.
EZ
Ezekiel
1 year ago
Okay, let me think this through. I know we need to cover things like code, functionality, and security policy. But I'm not sure if that's the complete set. I'll have to carefully consider each option before selecting my answer.
LU
Luke
1 year ago
Okay, let me think this through step-by-step. Search-time field extractions are used to extract data from the raw events, and that happens on the indexer, not the other components. I'm pretty sure the answer is C, the indexer.
GO
Goldie
1 year ago
Hmm, I'm not totally sure about this one. I'm debating between A and C. I'll have to think it through a bit more.
ER
Erasmo
1 year ago
Adam's got some serious skills if he's using ADS to hide his tools. Does he also have a secret underground lair and a cat to pet while he schemes? Jokes aside, A is the correct answer here.
TW
Twana
1 year ago
C) I bet he's got a whole setup going on.
KI
Kimi
1 year ago
B) No wonder he's able to hide his tools so well.
MA
Maricela
1 year ago
A) Adam is using NTFS file system.
SK
Skye
1 year ago
I bet Adam's the kind of guy who thinks he's the next L33t H4x0r. Hiding his tools in ADS? Classic. Definitely Windows and NTFS, not that Linux mumbo-jumbo. A all the way, my dude.
MI
Milly
1 year ago
C) Adam is using FAT file system.
DA
Danilo
1 year ago
Yeah, Adam definitely knows his way around Windows.
LA
Laurene
1 year ago
A) Adam is using NTFS file system.
JA
Jamal
1 year ago
Alternate Data Streams, huh? Sounds like Adam's been watching too many hacking tutorials on YouTube. I'm guessing he's not using a toaster oven to run his malware, so A is the way to go.
CA
Cammy
1 year ago
Ah, the old ADS trick. Gotta hand it to Adam, he's trying to be sneaky. But I think he's got the right operating system - Microsoft Windows, not Linux. Go with option A!
HA
Haley
1 year ago
Definitely, NTFS is the way to go for this kind of trick.
EA
Earnestine
1 year ago
I've heard of hackers using ADS to hide tools before, it's pretty clever.
AR
Art
1 year ago
Yeah, he's using NTFS file system, so option A is the right choice.
AL
Alison
1 year ago
I agree, Adam is definitely being sneaky with the ADS trick.
CO
Corinne
1 year ago
Well, this seems like a no-brainer. Adam is clearly using the NTFS file system, which is where Alternate Data Streams are a feature. Linux doesn't have this, and FAT doesn't either. As for Windows 98, that's just ridiculous.
KA
Karan
1 year ago
User 2: Yeah, Linux and FAT don't have Alternate Data Streams.
CO
Cordelia
1 year ago
User 1: Adam is definitely using the NTFS file system.
DA
Dannie
1 year ago
User 2: Yeah, that's the only option that makes sense. Linux and FAT don't have Alternate Data Streams.
CA
Candra
1 year ago
User 1: Adam must be using the NTFS file system.
TY
Ty
2 years ago
I'm not sure, but I think C) Adam is using FAT file system is incorrect because ADS is not supported in FAT.
AN
Andra
2 years ago
I agree with Ezekiel, because NTFS supports Alternate Data Streams.
EZ
Ezekiel
2 years ago
I think the answer is A) Adam is using NTFS file system.