Pete, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following should be used to accomplish this task? (Select TWO).

The correct answer is B. Recovery agent D. Key escrow. A Recovery Agent (B) is a designated account or person - typically an IT administrator - who is pre-configured to decrypt files encrypted by other users (e.g., via EFS on Windows). Key Escrow (D) is the practice of storing a copy of encryption keys with a trusted third party or w

General security concepts

Question

Options

APrivate hash
BRecovery agent
CPublic key
DKey escrow
ECRL

How the community answered

(37 responses)

A
8% (3)
B
76% (28)
C
3% (1)
E
14% (5)

Explanation

A Recovery Agent (B) is a designated account or person - typically an IT administrator - who is pre-configured to decrypt files encrypted by other users (e.g., via EFS on Windows). Key Escrow (D) is the practice of storing a copy of encryption keys with a trusted third party or within the organization, specifically so they can be retrieved in situations like this. Together, these two mechanisms ensure organizations are never locked out of their own encrypted data. A private hash (A) is not a decryption mechanism. A public key (C) is used for encryption, not decryption. A CRL (E) is a Certificate Revocation List used to invalidate certificates, unrelated to data recovery.

Topics

#key escrow#recovery agent#encryption#data recovery

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice