98-349 · Question #43
You need to be able to recover an encrypted file even if you lose the key. What should you do?
The correct answer is D. Create a recovery certificate and store it on a portable device. To recover an encrypted file even if the key is lost, you should create and store a recovery certificate, which allows a designated data recovery agent to decrypt the file.
Question
Options
- AUse the Encrypting File System (EFS).
- BUse System Restore to create a system restore point.
- CUse Bitlocker encryption.
- DCreate a recovery certificate and store it on a portable device.
How the community answered
(57 responses)- A2% (1)
- B4% (2)
- C5% (3)
- D89% (51)
Why each option
To recover an encrypted file even if the key is lost, you should create and store a recovery certificate, which allows a designated data recovery agent to decrypt the file.
Using EFS encrypts files but does not inherently provide a mechanism for key loss recovery without additional configuration like recovery agents.
System Restore is used to revert system changes and configurations, not to decrypt individual files due to a lost encryption key.
BitLocker encrypts entire volumes and does not provide an individual file recovery agent mechanism for lost EFS keys.
The Encrypting File System (EFS) supports data recovery agents (DRAs) through recovery certificates, enabling decryption of files if the original user's key is lost or unavailable. Storing this certificate securely on a portable device ensures it can be used when needed to regain access to encrypted data.
Concept tested: EFS data recovery agent certificates
Source: https://learn.microsoft.com/en-us/windows/security/information-protection/efs/data-recovery-and-efs
Topics
Community Discussion
No community discussion yet for this question.