You work as a desktop support technician at ABC.com. The ABC.com network consists of a
single Active Directory domain named ABC.com. ABC.com currently makes use of a stand-alone
computer named ABC-WS680 that runs Microsoft Windows 7. ABC-WS680 contains a single
partition and is used by two ABC.com users named Rory Allen and Kara Lang.
Due to the security requirements of ABC.com Rory Allen is encrypting the files by using Encrypting
File System (EFS). Rory allen reports that he has provided access and assigned the encrypted
files to Kara Long?During the course of the day Kara Lang needs to access to the encrypted files.
However, Kara Lang is unable to access the encrypted files.
How should you ensure that Kara Lang is able to access the encrypted files of Rory Allen?
A.
By having Rory Allen grant Kara Lang Full Control permissions on the files.
B.
By having Rory Allen grant Kara Lang Take Ownership permissions on the files.
C.
By disabling EFS on ABC-WS680.
D.
By having Kara Lang to encrypt the files after logging into ABC-WS680
Explanation:
This is a standalone computer. When Kara logs on and encrypts a file, the system
will automatically generate an encryption certificate for her. The owner (Rory) of the encrypted file
will also need to add Lara’s certificate to the file.
To add the EFS certificate to the shared file
Right-click the file you want to share, and then click Properties.
Click the General tab, and then click Advanced.
In the Advanced Attributes dialog box, click Details.
In the dialog box that appears, click Add.
In the Select User dialog box, click the certificate, and then click OK.
You can also use the “chiper.exe” command from the command line. You would use the adduser
command along with the cert command.
If Kara already has a certificate and you want to use that certificate, you have to perform two
additional steps:
1. Export Kara’s Certificate &
2. Import Kara’s certificate to Rory’s machine.