GIAC
GCFA · Question #211
GCFA Question #211: Real Exam Question with Answer & Explanation
The correct answer is C. Copy the files to a network share on an NTFS volume.. EFS encryption can only be preserved when files are copied to an NTFS volume, as FAT32 and floppy disk formats do not support EFS.
Question
You work as a Network Administrator for NetTech Inc. To ensure the security of files, you encrypt data files using Encrypting File System (EFS). You want to make a backup copy of the files and maintain security settings. You can backup the files either to a network share or a floppy disk. What will you do to accomplish this?
Options
- APlace the files in an encrypted folder. Then, copy the folder to a floppy disk.
- BCopy the files to a network share on a FAT32 volume.
- CCopy the files to a network share on an NTFS volume.
- DCopy the files to a floppy disk that has been formatted using Windows 2000 Professional.
Explanation
EFS encryption can only be preserved when files are copied to an NTFS volume, as FAT32 and floppy disk formats do not support EFS.
Common mistakes.
- A. Placing files in an encrypted folder and copying to a floppy disk will not maintain EFS encryption because floppy disks use FAT format, which does not support NTFS encryption attributes.
- B. Copying to a network share formatted with FAT32 will strip the EFS encryption because FAT32 does not support the NTFS encryption feature.
- D. Floppy disks formatted with any version of Windows use FAT-based file systems, which do not support EFS, so encryption would be lost during the copy.
Concept tested. EFS encryption preservation with NTFS file system requirement
Reference. https://learn.microsoft.com/en-us/windows/win32/fileio/file-encryption
Community Discussion
No community discussion yet for this question.