QuestionQ430

Managing Encryption and Privacy

Mark is a Network Administrator for NetTech Inc. The company operates a Windows 2003 Active Directory domain-based network. The domain includes four domain controllers, six Windows 2003 member servers, and 500 Windows XP Professional client computers. The PKI infrastructure has already been configured on the network.

The network’s current configuration permits only managers to use EFS on local computers. Mark sometimes encounters problems when managers lose their private keys because a user profile becomes corrupt or is lost. Consequently, files persistently encrypted by using the corresponding public key cannot be accessed. He wants to restore access to the encrypted files as quickly as possible. What should he do to accomplish this task?

  • A Ask the managers to log on to the network with a new user account.
  • B Rename all the encrypted files and ask the managers to open the files.
  • C Configure key archival on certificate authority (CA).
  • D Ask the managers to use the Distributed file system (Dfs) to encrypt important files.
Explanation

Key archival on a certification authority securely archives encryption private keys so that an authorized key recovery agent can retrieve and restore a lost key. Restoring that EFS private key enables decryption of files encrypted with its corresponding public key. Key archival must be configured before the applicable encryption certificates are issued; it protects against subsequent private-key loss.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!