GCIH Exam QuestionsBrowse all questions from this exam

GCIH Exam - Question 127


How would an attacker hide an executable from being viewed by Windows Explorer?

Show Answer
Correct Answer: D

An attacker can hide an executable from being viewed by Windows Explorer by placing it into an Alternate Data Stream (ADS) of a text file. ADS is a feature of NTFS file systems in Windows that allows more than one data stream to be associated with a filename, providing an effective way to hide data without it being easily detected through standard file browsing techniques.

Discussion

1 comment
Sign in to comment
XBal
Sep 16, 2024

Answer should be "D"