An Employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the Employees Computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the Employee before he leaves the building and recover the floppy disks and secure his computer. Will you be able to break the encryption so that you can verify that that the employee was in possession of the proprietary information?
A) EFS uses a 128-bit key that can't be cracked, so you will not be able to recover the information
B) When the encrypted file was copied to the floppy disk, it was automatically unencrypted, so you can recover the information.
C) The EFS Revoked Key Agent can be used on the Computer to recover the information
D) When the Encrypted file was copied to the floppy disk, the EFS private key was also copied to the floppy disk, so you can recover the information.
Correct Answer:
Verified
Q484: What does mactime, an essential part of
Q485: Chris has been called upon to investigate
Q486: Volatile Memory is one of the leading
Q487: One way to identify the presence of
Q488: Which of the following refers to the
Q490: When examining a hard disk without a
Q491: The use of warning banners helps a
Q492: You are working in the security Department
Q493: Melanie was newly assigned to an investigation
Q494: A state department site was recently attacked
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents