GIAC Certified Forensic Analyst (GCFA) — Question 32

Which of the following two cryptography methods are used by NTFS Encrypting File System (EFS) to encrypt the data stored on a disk on a file-by-file basis?

Answer options

• A. Digital certificates
• B. Public key
• C. RSA
• D. Twofish

Correct answer: A, B

Explanation

The correct answers, A and B, refer to the use of digital certificates and public keys for secure encryption in EFS. RSA (C) is a specific encryption algorithm that EFS may use but is not a method itself, while Twofish (D) is another encryption algorithm that is not employed by EFS.