Your network has a Windows 2000 Server computer with FAT file system, shared by several users. This system stores sensitive data. You decide to encrypt this data to protect it from unauthorized access. You want to accomplish the following goals:

Datashould be secure and encrypted.

Administrative effortsshould be minimum.

You should have the ability to recover encrypted filesin case the file owner leavesthe company.

Other permissionson encrypted filesshould be unaffected.

File-level security is required on the disk where data is stored. Encryptingor decrypting of filesshould not

be the responsibility of the file owner. You take the following steps to accomplish these goals :

Convert the FATfile system to Windows2000 NTFSfile system.

Use EncryptingFile System (EFS) to encrypt data.

Which of the following goals will you be able to accomplish? Each correct answer represents a complete solution. Choose all that apply.

Question

Your network has a Windows 2000 Server computer with FAT file system, shared by several users. This system stores sensitive data. You decide to encrypt this data to protect it from unauthorized access. You want to accomplish the following goals:

Datashould be secure and encrypted.
Administrative effortsshould be minimum.
You should have the ability to recover encrypted filesin case the file owner leavesthe company.
Other permissionson encrypted filesshould be unaffected.
File-level security is required on the disk where data is stored. Encryptingor decrypting of filesshould not

be the responsibility of the file owner. You take the following steps to accomplish these goals :

Convert the FATfile system to Windows2000 NTFSfile system.
Use EncryptingFile System (EFS) to encrypt data.

Which of the following goals will you be able to accomplish? Each correct answer represents a complete solution. Choose all that apply.

Accepted Answer

A. File-level security is available on the disk where data is stored. NTFS provides file-level security through access control lists (ACLs), which FAT does not support - converting to NTFS directly fulfills the file-level security requirement. B. You have the ability to recover encrypted files in case the file owner leaves the company. EFS supports a designated Recovery Agent (typically the domain administrator) who can decrypt EFS-protected files if the original owner's certificate is unavailable or the owner leaves the organization. C. Encrypting or decrypting of files is no longer the responsibility of the file owner. Once EFS is configured by an administrator, encryption and decryption occur transparently at the OS level, removing direct encryption responsibility from the individual file owner. D. Data are secured and encrypted. EFS uses strong encryption (3DES or AES depending on configuration) to secure files stored on NTFS volumes, directly satisfying the requirement that data be secured and encrypted. E. Administrative efforts are minimum. EFS is built into Windows 2000 and integrates natively with NTFS without requiring additional third-party software, keeping administrative overhead minimal. F. Other permissions on encrypted files are unaffected. EFS encryption operates independently of NTFS ACL-based file permissions - existing permission assignments remain intact and unaffected when EFS encryption is applied to files.

Your network has a Windows 2000 Server computer with FAT file system, shared by several users. This system stores sensitive data. You decide to encrypt this data to protect it from unauthorized access

Question

Options

How the community answered

Why each option

Topics

Community Discussion