Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam 312-49v10 All Questions
Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

ECCouncil CHFI v10 312-49v10 Question # 77 Topic 10 Discussion

312-49v10 Exam Topic 10 Question 77 Discussion:
Question #: 77
Topic #: 10

An Employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the Employees Computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the Employee before he leaves the building and recover the floppy disks and secure his computer. Will you be able to break the encryption so that you can verify that that the employee was in possession of the proprietary information?


A.

EFS uses a 128-bit key that can't be cracked, so you will not be able to recover the information


B.

When the encrypted file was copied to the floppy disk, it was automatically unencrypted, so you can recover the information.


C.

The EFS Revoked Key Agent can be used on the Computer to recover the information


D.

When the Encrypted file was copied to the floppy disk, the EFS private key was also copied to the floppy disk, so you can recover the information.


Get Premium 312-49v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.