Which of the following statements is true regarding eCryptfs?

Question

Options

• AFor every file in an eCryptfs directory there exists a corresponding file that contains the encrypted
• BThe content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an
• CAfter unmounting an eCryptfs directory, the directory hierarchy and the original file names are still
• DWhen a user changes his login password, the contents of his eCryptfs home directory has to be re-
• EeCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux

• A
  4% (2)
• C
  2% (1)
• E
  93% (42)

Explanation

eCryptfs is a stacked filesystem that can encrypt any directory on a Linux system - not just home directories - making option E true: it is not restricted to home directory encryption only. Option A is false because eCryptfs doesn't maintain a separate encrypted counterpart alongside an unencrypted original; the encrypted files in the lower directory are the only copies, with the mount point providing a transparent decrypted view. Option B is false because eCryptfs encrypts files individually, not by bundling them into a tar-like archive. Option C is false because when filename encryption is enabled (common in modern eCryptfs setups), the filenames in the lower directory are also encrypted and unreadable after unmounting. Option D is false because eCryptfs uses a key hierarchy - changing your login password only re-wraps the passphrase/key material, not the actual file contents.

Memory tip: Remember eCryptfs by what it is not - not archive-based (B), not keeping dual copies (A), not leaving names exposed (C), not forcing re-encryption on password change (D), and not limited to home directories (E = True).

No community discussion yet for this question.