A+ EFS and BitLocker Security Quiz

1. BitLocker can be configured to require authentication at startup. Which method is NOT typically supported?

PIN entry

USB key insertion

Fingerprint scan

TPM automatic unlock

2. An organization requires encryption for laptops containing customer data. Which solution provides the best protection against theft?

EFS on selected folders

BitLocker full-disk encryption

Password protection only

File compression

3. When BitLocker is enabled, what happens during the initial encryption process?

The drive is immediately locked and inaccessible

Encryption occurs in the background while the system is in use

All files must be manually re-encrypted

The system must be in Safe Mode

4. What is the main advantage of using EFS over BitLocker for protecting sensitive files?

EFS encrypts at the file level, allowing selective encryption

EFS is faster than BitLocker

EFS does not require a password

EFS works on all file systems

5. BitLocker recovery information can be stored in which of the following locations?

Local file only

USB drive only

Active Directory, Microsoft Account, or USB

Email only

6. A user's EFS recovery agent certificate is lost. What should be done to prevent data loss?

Immediately delete encrypted files

Back up recovery agent certificates regularly

Use BitLocker instead of EFS

Disable EFS on all systems

7. BitLocker Drive Encryption protects data primarily from which threat?

Malware infections

Unauthorized physical access to the drive

Network-based attacks

Weak passwords

8. Which file system is required for EFS to function properly?

FAT32

ExFAT

NTFS

ReFS

9. EFS allows multiple users to access the same encrypted file. How is this possible?

The file is decrypted and re-encrypted for each user

Additional users' certificates are added to the file's EFS metadata

All users share the same encryption key

EFS does not support multi-user access

10. What is the purpose of a recovery password in BitLocker?

To speed up file encryption

To unlock the drive if TPM fails or PIN is forgotten

To share encrypted files with other users

To monitor drive access

11. What is the primary function of the Encrypting File System (EFS)?

Encrypts individual files and folders at the NTFS level

Encrypts the entire hard disk drive

Encrypts network traffic between computers

Encrypts user account passwords only

12. An EFS certificate expires. What is the best practice for protecting encrypted files?

Delete the encrypted files

Decrypt files and re-encrypt with a new certificate

Use BitLocker instead

Move files to a shared network location

13. What does TPM (Trusted Platform Module) do in a BitLocker environment?

Stores encryption keys and validates system integrity

Generates recovery passwords

Manages file permissions

Monitors network traffic

14. Which Windows editions support BitLocker encryption?

Home and Professional only

Professional, Enterprise, and Education editions

All Windows editions

Enterprise and Server editions only

15. What happens to EFS-encrypted files when they are copied to a FAT32 partition?

They remain encrypted

They are automatically decrypted

The copy operation fails

They are re-encrypted with a different key

16. EFS uses a combination of symmetric and asymmetric encryption. Which key encrypts the actual file data?

User's private key

File Encryption Key (FEK)

Public key certificate

Recovery agent key

17. Which of the following is a requirement for BitLocker on Windows?

Minimum 2 GB RAM

TPM 1.2 or higher (or USB startup key)

Internet connection

Active Directory domain membership

18. What is the primary purpose of the BitLocker recovery key?

To encrypt sensitive files faster

To decrypt the drive if the PIN or password is forgotten

To disable BitLocker protection

To create backup copies of files

19. BitLocker is a full-disk encryption technology that protects data at which level?

File level only

Folder level only

Volume level

Application level

20. Which encryption algorithm does EFS typically use by default?

RSA-2048

AES-256

3DES

DES

A+ Encrypting File System and BitLocker Basics Quiz