Computer Hacking Forensic Investigator (CHFI v10) — Question 165

Assume there is a file named myfile.txt in C: drive that contains hidden data streams. Which of the following commands would you issue to display the contents of a data stream?

Answer options

• A. echo text > program:source_file
• B. C:\>ECHO text_message > myfile.txt:stream1
• C. C:\MORE < myfile.txt:stream1
• D. myfile.dat:stream1

Correct answer: C

Explanation

The correct answer is C because the MORE command can be used to display the contents of a data stream in a readable format. Options A and B are incorrect as they are trying to write data rather than read it, and option D is not a valid command for viewing data stream contents.