MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Lesson 4 Increasing Security by Using EFS
10-55
the material in this lesson before beginning the next lesson. You can find answers to
these questions in the “Questions and Answers” section at the end of this chapter.
1. What is encryption and what is the EFS?
2. Which of the following files and folders does Windows XP Professional allow you
to encrypt? (Choose all that apply.)
a. A file on an NTFS volume
b. A folder on a FAT volume
c. A file stored on a floppy
d. A folder on an NTFS volume
3. How do you encrypt a folder? Is the folder actually encrypted?
4. If the private key belonging to the owner of an encrypted file is not available, how
can you decrypt the file?
5. By default, the recovery agent for a computer running Windows XP Professional
in a workgroup is ____________, and the recovery agent for a computer running
Windows XP Professional in a domain environment is _____________________.
Lesson Summary
■ EFS allows users to encrypt files and folder on an NTFS volume by using a strong
public key–based cryptographic scheme that encrypts all files in a folder. Backups
and copies of encrypted files are also encrypted if they are in NTFS volumes. Files
remain encrypted if you move or rename them, and encryption is not defeated by
leakage to paging files.