Which command would NOT effectively hide an executable using an alternate data stream?

Enhance your skills for the CompTIA PenTest+ Exam with CertMaster. Utilize flashcards and multiple-choice questions with detailed explanations. Get fully prepared for your certification!

The command that does not effectively hide an executable using an alternate data stream is the one that simply copies the executable file to a new location without creating an alternate data stream. When you use the copy command in this manner, it results in a standard file copy. This means that the original executable retains its attributes and visibility, while the copied file does not utilize the alternate data stream feature.

Alternate data streams (ADS) are a feature of NTFS file systems that allow you to associate additional metadata with a file, hence making it possible to hide files like executables. Options that involve the use of ">" or naming conventions that specifically identify an alternate data stream (as is the case with the other commands) do indeed create and utilize such streams, effectively hiding the executables from normal file listings.

Thus, the copy command does not utilize the ADS capability, hence it does not achieve the aim of hiding the executable effectively.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy