GCFA · Question #307
Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers? (Click the Exhibit button on the toolbar to see the case
The correct answer is B. Encrypting File System (EFS) C. Digital certificates. EFS and digital certificates address the primary security risks for laptop computers - data-at-rest exposure from theft and weak identity authentication. Other options either introduce vulnerabilities or protect different attack surfaces.
Question
Based on the case study, to implement more security, which of the following additional technologies should you implement for laptop computers? (Click the Exhibit button on the toolbar to see the case study.) Each correct answer represents a complete solution. Choose two.
Options
- APAP authentication
- BEncrypting File System (EFS)
- CDigital certificates
- DTwo-factor authentication
- EEncrypted Data Transmissions
How the community answered
(32 responses)- A19% (6)
- B72% (23)
- D6% (2)
- E3% (1)
Why each option
EFS and digital certificates address the primary security risks for laptop computers - data-at-rest exposure from theft and weak identity authentication. Other options either introduce vulnerabilities or protect different attack surfaces.
PAP (Password Authentication Protocol) transmits credentials in cleartext and provides no protection against eavesdropping, making it a security regression rather than an improvement for laptop authentication.
EFS encrypts files stored on NTFS volumes using the user's credentials so that if a laptop is physically stolen or the drive is removed, the data remains unreadable without the associated private key or recovery agent certificate. This directly mitigates the most common laptop-specific threat of data exposure through physical loss.
Digital certificates enable strong cryptographic authentication for laptop logon and VPN access, replacing weaker password-only mechanisms with a private key that cannot be easily guessed or stolen without the physical certificate store or smart card.
Two-factor authentication improves logon security but the case study context indicates the primary requirement is data protection at rest and identity assurance via certificates, which two-factor authentication alone does not provide.
Encrypted data transmissions protect data moving over a network but do not protect files stored locally on a laptop drive, leaving the most critical laptop risk - data exposure from physical theft - unaddressed.
Concept tested: Laptop data-at-rest protection using EFS and digital certificates
Source: https://learn.microsoft.com/en-us/windows/security/information-protection/encrypting-file-system/encrypting-file-system-overview
Topics
Community Discussion
No community discussion yet for this question.