GSEC · Question #231
You work as a Network Administrator for NetTech Inc. To ensure the security of files, you encrypt data files using Encrypting File System (EFS). You want to make a backup copy of the files and…
The correct answer is A. Copy the files to a network share on an NTFS volume. EFS-encrypted files retain their encryption only when stored on NTFS volumes, making a network share on an NTFS volume the only valid backup option that preserves security settings.
Question
You work as a Network Administrator for NetTech Inc. To ensure the security of files, you encrypt data files using Encrypting File System (EFS). You want to make a backup copy of the files and maintain security settings. You can backup the files either to a network share or a floppy disk. What will you do to accomplish this?
Options
- ACopy the files to a network share on an NTFS volume.
- BCopy the files to a network share on a FAT32 volume.
- CPlace the files in an encrypted folder. Then, copy the folder to a floppy disk.
- DCopy the files to a floppy disk that has been formatted using Windows 2000 Professional.
How the community answered
(39 responses)- A72% (28)
- B5% (2)
- C8% (3)
- D15% (6)
Why each option
EFS-encrypted files retain their encryption only when stored on NTFS volumes, making a network share on an NTFS volume the only valid backup option that preserves security settings.
EFS (Encrypting File System) is an NTFS-specific feature, meaning encrypted files retain their encryption attributes only when moved or copied to another NTFS-formatted volume. Copying to a network share hosted on an NTFS volume preserves the EFS encryption metadata and access controls, satisfying both the backup and security requirements. No other file system type, including FAT32 or FAT-formatted removable media, supports EFS encryption.
FAT32 volumes do not support EFS, so copying an EFS-encrypted file to a FAT32 network share would strip the encryption and expose the data in plaintext.
Floppy disks are formatted with FAT-based file systems that do not support NTFS or EFS, so the files would lose their encryption upon copying regardless of whether they are in an encrypted folder.
A floppy disk formatted with Windows 2000 Professional still uses FAT-based formatting, which does not support EFS, meaning encryption would not be preserved during the copy.
Concept tested: EFS encryption preservation on NTFS volumes
Source: https://learn.microsoft.com/en-us/windows/security/information-protection/encrypting-file-system/encrypting-file-system-overview
Topics
Community Discussion
No community discussion yet for this question.