nerdexam
GIAC

GCFA · Question #307

Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers? (Click the Exhibit button on the toolbar to see the case

The correct answer is B. Encrypting File System (EFS) C. Digital certificates. EFS and digital certificates address the primary security risks for laptop computers - data-at-rest exposure from theft and weak identity authentication. Other options either introduce vulnerabilities or protect different attack surfaces.

Advanced Windows Artifacts & Browser Forensics

Question

Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers? (Click the Exhibit button on the toolbar to see the case study.) Each correct answer represents a complete solution. Choose two.

Options

  • APAP authentication
  • BEncrypting File System (EFS)
  • CDigital certificates
  • DTwo-factor authentication
  • EEncrypted Data Transmissions

How the community answered

(32 responses)
  • A
    19% (6)
  • B
    72% (23)
  • D
    6% (2)
  • E
    3% (1)

Why each option

EFS and digital certificates address the primary security risks for laptop computers - data-at-rest exposure from theft and weak identity authentication. Other options either introduce vulnerabilities or protect different attack surfaces.

APAP authentication

PAP (Password Authentication Protocol) transmits credentials in cleartext and provides no protection against eavesdropping, making it a security regression rather than an improvement for laptop authentication.

BEncrypting File System (EFS)Correct

EFS encrypts files stored on NTFS volumes using the user's credentials so that if a laptop is physically stolen or the drive is removed, the data remains unreadable without the associated private key or recovery agent certificate. This directly mitigates the most common laptop-specific threat of data exposure through physical loss.

CDigital certificatesCorrect

Digital certificates enable strong cryptographic authentication for laptop logon and VPN access, replacing weaker password-only mechanisms with a private key that cannot be easily guessed or stolen without the physical certificate store or smart card.

DTwo-factor authentication

Two-factor authentication improves logon security but the case study context indicates the primary requirement is data protection at rest and identity assurance via certificates, which two-factor authentication alone does not provide.

EEncrypted Data Transmissions

Encrypted data transmissions protect data moving over a network but do not protect files stored locally on a laptop drive, leaving the most critical laptop risk - data exposure from physical theft - unaddressed.

Concept tested: Laptop data-at-rest protection using EFS and digital certificates

Source: https://learn.microsoft.com/en-us/windows/security/information-protection/encrypting-file-system/encrypting-file-system-overview

Topics

#EFS#digital certificates#laptop security#encryption technologies

Community Discussion

No community discussion yet for this question.

Full GCFA Practice