220-1002 · Question #382
A technician is attempting to recover data from a damaged laptop that was running Windows 10. The technician removes the drive and places it in a known-good computer. The computer boots and sees the…
The correct answer is D. EFS security. EFS (Encrypting File System) is Windows' built-in file-level encryption. When a drive protected by EFS is moved to a different computer, the encrypted files appear inaccessible (or invisible) because the decryption keys are tied to the original user account and machine's…
Question
A technician is attempting to recover data from a damaged laptop that was running Windows 10. The technician removes the drive and places it in a known-good computer. The computer boots and sees the drive, but no data is displayed. Which of the following is the reason the technician is experiencing this issue?
Options
- AexFAT security
- BExt3 security
- CHFS security
- DEFS security
- ECDFS security
How the community answered
(50 responses)- A2% (1)
- B14% (7)
- C2% (1)
- D74% (37)
- E8% (4)
Explanation
EFS (Encrypting File System) is Windows' built-in file-level encryption. When a drive protected by EFS is moved to a different computer, the encrypted files appear inaccessible (or invisible) because the decryption keys are tied to the original user account and machine's certificate store. Without the original credentials or exported certificate, the data cannot be read. exFAT, Ext3, HFS, and CDFS are file system formats that do not inherently hide or encrypt data when a drive is moved to another machine.
Topics
Community Discussion
No community discussion yet for this question.