Microsoft
70-982 · Question #79
Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise cerfication authority (CA). You plan to implement Encrypting File System (EFS) to encrypt data…
The correct answer is B. Provide the auditors with access to a data recovery agent certificate. decrypt-encryptedfiles-in-domain/
Manage user environments and applications
Question
Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise cerfication authority (CA). You plan to implement Encrypting File System (EFS) to encrypt data on the client computer of each user. You need to recommend a solution to provide your company internal auditors with the ability to decrypt any encrypted files on the client computers. What should you recommend?
Options
- AAdd the auditors to the Domain Admins group
- BProvide the auditors with access to a data recovery agent certificate
- CProvide the auditors with access to a key recovery certificate
- DAdd the auditors to the local Administrators group on each client computer
How the community answered
(45 responses)- A2% (1)
- B84% (38)
- C9% (4)
- D4% (2)
Explanation
decrypt-encryptedfiles-in-domain/
Topics
#EFS#data recovery agent#PKI#certificate authority
Community Discussion
No community discussion yet for this question.