MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Objective 7.1 Configure, Manage, and Troubleshoot Encrypting File System (EFS)
27-9
3. Correct Answers: D
A. Incorrect: Neither FAT nor FAT32 supports EFS. Only NTFS supports EFS.
B. Incorrect: FAT32 does not support EFS. Only NTFS supports EFS. As a result,
operating systems that do not support NTFS, such as Windows 98 and Windows
ME, cannot use EFS.
C. Incorrect: CDFS is the file system used for CD-ROM media. You cannot use EFS
on CD-ROM drives.
D. Correct: NTFS is the only file system that supports EFS.
4. Correct Answers: C
A. Incorrect: Although compression and encryption can be combined, compressing
files does nothing to improve confidentiality.
B. Incorrect: Creating restrictive file permissions does improve the security of files
when a user is logged on. However, file permissions are not sufficient to deter an
attacker with physical access to the system. An attacker who can access the computer’s
hard disk can bypass file security. Encryption is the best way to deter
attackers with physical access to a computer.
C. Correct: Choosing to encrypt the contents of a folder enables EFS. All files and
subfolders can be automatically encrypted, and new files and subfolders will be
automatically encrypted. Because the files are encrypted, the security cannot be
bypassed as easily as file security.
D. Incorrect: Although encrypting existing files and folders would make it much
more difficult for a thief to gain access to those files, new files would not be
encrypted because the parent folder properties were not modified.