StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Storage and file services · Storage and file services | Configure Windows Server storage

Practice question 493 of 506 · hard

An administrator unlocks a recovered BitLocker-protected NTFS volume with the correct recovery password. An EFS-encrypted file still cannot be opened under the administrator account. Which additional recovery material is needed?

Choose the single best answer.

  1. A.The EFS public certificate alone, without its matching private key
  2. B.Another BitLocker protector for the same volume, assuming a different protector also decrypts the separate EFS file key
  3. C.The file's ownership alone, because taking ownership decrypts EFS content
  4. D.The file owner's applicable EFS private key or a designated EFS recovery-agent private key
Show the answer and explanation

✓ Correct answer

  • The file owner's applicable EFS private key or a designated EFS recovery-agent private key

EFS file decryption requires the applicable owner or recovery-agent private key. BitLocker protectors unlock the volume and do not supply EFS private keys. A public certificate alone cannot decrypt the file key; taking ownership or changing ACLs does not supply decryption material.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.