SK0-003 · Question #397
In a Windows Server 2003 environment using PKI, a user encrypts several documents on a shared file server. That user account is then accidentally deleted. Which of the following must be configured…
The correct answer is B. Key recovery agent. When a user's account is accidentally deleted in a Windows Server 2003 PKI environment, preventing access to their private key, a configured Key Recovery Agent is required to decrypt the files they had encrypted.
Question
In a Windows Server 2003 environment using PKI, a user encrypts several documents on a shared file server. That user account is then accidentally deleted. Which of the following must be configured in order to decrypt those files?
Options
- AKey recovery administrator
- BKey recovery agent
- CTrusted root certificate store
- DRoot certificate store
How the community answered
(39 responses)- A10% (4)
- B82% (32)
- C5% (2)
- D3% (1)
Why each option
When a user's account is accidentally deleted in a Windows Server 2003 PKI environment, preventing access to their private key, a configured Key Recovery Agent is required to decrypt the files they had encrypted.
Key recovery administrator is not a standard role or mechanism for key recovery in Windows Server 2003 PKI; the correct term is Key Recovery Agent.
A Key Recovery Agent (KRA) in a Windows Server 2003 PKI infrastructure is specifically configured with a key recovery certificate to archive and recover private keys for encrypted data, such as EFS-encrypted files. When an encrypting user's private key becomes inaccessible, the KRA can recover the corresponding data encryption key, allowing decryption of the files.
The trusted root certificate store is used to establish trust in certificate authorities, not to recover specific user encryption keys.
The root certificate store, similar to the trusted root certificate store, manages trusted CAs and does not provide a mechanism for recovering individual user encryption keys.
Concept tested: Windows Server 2003 PKI Key Recovery Agent role
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc779051(v=ws.10)
Topics
Community Discussion
No community discussion yet for this question.