Which of the following is true about the recovery agent?

A data recovery agent (DRA) is a designated entity with a specially issued certificate that allows it to decrypt EFS-protected files or other encrypted data on behalf of users who have lost their private key. The recovery agent uses its own certificate to perform decryption directly and does not reconstruct or return the original user's private key, making it accurate that it can decrypt messages/data for users whose private keys are gone.

A recovery agent cannot recover or reconstruct both the private and public key of any user; its function is to decrypt data using its own certificate, not to restore key pairs.

A recovery agent does not provide users with their lost private key; it decrypts the protected data on their behalf using its own credentials, leaving the original private key unrecoverable.

Public keys are not secret and do not require recovery; the recovery agent's function is specifically about decrypting data, not retrieving or distributing public keys.