Which of the following two cryptography methods are used by NTFS Encrypting File System (EFS) to encrypt the data stored on a disk on a file-by-file basis?

Digital certificates store the user's public/private key pair and are used by EFS to identify and bind the encryption keys to a specific user account, enabling secure key management and recovery.

EFS uses public key cryptography to encrypt the per-file File Encryption Key (FEK) - the FEK itself encrypts the file data, but the FEK is then asymmetrically encrypted with the user's public key so only the corresponding private key can unlock it.

RSA is an underlying cryptographic algorithm that may be used within the public key infrastructure, but it is not one of the two named methods EFS is defined by - the question targets the conceptual mechanisms (public key and digital certificates), not the algorithm.

Twofish is a symmetric block cipher that is not used by NTFS EFS; EFS uses algorithms such as DESX, 3DES, or AES for symmetric file encryption of the FEK-protected data.