Objective 7.1 in Visual C#

Creating QR Code in Visual C# Objective 7.1

Configure, Manage, and Troubleshoot Encrypting File System (EFS)

27-7

A. In Windows Explorer, right-click the Confidential folder and click Properties. Click the Advanced button and select the Compress Contents To Save Disk Space checkbox. B. In Windows Explorer, right-click the Confidential folder and click Properties. Then, click the Security tab. Remove all user accounts from the Group Or User Names List. Then, add the CEO s user account to the list and grant the account Full Control permissions. C. In Windows Explorer, right-click the Confidential folder and click Properties. Then, click the Advanced button and select the Encrypt Contents To Secure Data check box. D. In Windows Explorer, select the Confidential folder and then press Ctrl+A to select all files in the folder. Right-click the selected files and then click Properties. Then, click the Advanced button and select the Encrypt Contents To Secure Data check box.

27-8

27

Correct Answers: D A. Incorrect: Although you can use Windows Explorer to manually encrypt files and folders, it is a graphical tool that cannot be easily incorporated into a script. B. Incorrect: Efsinfo (EFSINFO.EXE) is a command-line tool that displays information about encrypted files and folders you cannot use it to encrypt or decrypt files or folders. C. Incorrect: Syskey (SYSKEY.EXE) is the graphical Startup Key tool for encrypting sensitive operating system files it cannot be used to encrypt user s data files. D. Correct: Cipher (CIPHER.EXE) is a command-line tool for creating file encryption keys, viewing encryption settings, encrypting files and folders, and decrypting files and folders. It is the best tool to use in a script for encrypting files and folders.

Correct Answers: B A. Incorrect: Encryption is separate from NTFS permissions. As a member of the Domain Admins group, you can modify the permissions on Jim s documents, but giving April Full Control will still not enable her to decrypt the files because she is not a recovery agent. B. Correct: Windows XP Professional computers that are members of an Active Directory domain automatically specify the domain administrator account (domain_name\Administrator) as EFS recovery agents because those accounts are designated as encryption recovery agents in the Default Domain Policy Group Policy Object (GPO). C. Incorrect: When a Windows XP Professional computer joins an Active Directory domain, the domain administrator account (domain_name\Administrator) becomes the default recovery agent. Whether the computer is a stand-alone system or a member of an Active Directory domain, the local Administrator account is never automatically made a recovery agent. Note that there is an alternative solution to this situation: If John s domain account has not been deleted yet, you can reset the password for that account and then log on with her account and decrypt the files. D. Incorrect: Files encrypted via EFS remain encrypted when backed up to tape the restored files are still encrypted and inaccessible to April.

Configure, Manage, and Troubleshoot Encrypting File System (EFS)

27-9

Correct Answers: D A. Incorrect: Neither FAT nor FAT32 supports EFS. Only NTFS supports EFS. B. Incorrect: FAT32 does not support EFS. Only NTFS supports EFS. As a result, operating systems that do not support NTFS, such as Windows 98 and Windows ME, cannot use EFS. C. Incorrect: CDFS is the file system used for CD-ROM media. You cannot use EFS on CD-ROM drives. D. Correct: NTFS is the only file system that supports EFS.

Correct Answers: C A. Incorrect: Although compression and encryption can be combined, compressing files does nothing to improve confidentiality. B. Incorrect: Creating restrictive file permissions does improve the security of files when a user is logged on. However, file permissions are not sufficient to deter an attacker with physical access to the system. An attacker who can access the computer s hard disk can bypass file security. Encryption is the best way to deter attackers with physical access to a computer. C. Correct: Choosing to encrypt the contents of a folder enables EFS. All files and subfolders can be automatically encrypted, and new files and subfolders will be automatically encrypted. Because the files are encrypted, the security cannot be bypassed as easily as file security. D. Incorrect: Although encrypting existing files and folders would make it much more difficult for a thief to gain access to those files, new files would not be encrypted because the parent folder properties were not modified.

27-10