Exam MD-100 topic 3 question 95 discussion

i am voting for an incorrect answer. All users can move the file to a location on the same volume but when trying to move it to Folder 3 on the D drive windows asks for administrative credentials for all users except User1 who can move this file to Folder3. I have set this question up with the following results

Answer1: user1,user2,user3 and user4 Answer2: user1 only

Wrong answers AGAIN! What is this?

Correct Answer: User1,User2,User3,User4 and User1 Only

I just tested it. Anyone can move the file within the same volume C: ONLY the owner (User1) can move the file to a different volume D: Even a member of the local administrators group, even the actual Administrator account itself cannot move across volumes without permission from User1. Here's what happened: - User1 was prompted for administrator credentials and the file moved - User2 was prompted for administrator credentials and THEN got the error that they would also need User1's permission (so no move) - A member of the administrator's group was prompted by UAC to continue, and THEN got the error that they would also need User1's permission (no move) - The actual Administrator account had the same result as a member of the administrator's group. Looks like you need BOTH the original creator's permission AND administrative credentials.

only the owner can move the file from the location. If you are trying to copy the file it will prompt for admin credentials, after you put in the admin credentials, you will receive the message that you need the permission from the owner to move the file

MS Say everybody on a direct question here: https://answers.microsoft.com/en-us/windows/forum/all/efs-copying-moving-files/a013bd25-fca9-475c-a4aa-15b8e2de3b51#:~:text=EFS%20encrypted%20files%20can%20be,copy%20of%20EFS%20protected%20file.

We lab'd this, only the owner of the file can move the file to another drive. (Will ask for the user's sign-in info if not the file owner)

My Lab W10 pro 21H2 User1 creates a file and encrypts it User1 can move or copy the file to another volume and disk Admin can't move or copy the file to another volume and disk Both can delete

Comparing topic 3#32 which is similar. In that question, EFS is specifically mentioned. And the users are either 'Users', 'Administrators', or both. That question's "offical correct answer" says anybody can move the file within a volume, but only the person who encrypted can traverse volumes.... In this question (topic 3#95) EFS is NOT mentioned.. it just says'User1 encrypts a file'.. and now they introduce 'back operators' and 'cryptographic operators. And the 'official' answer here says any user can traverse volumes. I'm trying to see what would make the difference (assuming these 'official' answers are even correct) and it seems like the fact that EFS is NOT mentioned may have some importance??

EFS encrypted files can be copied by another user on same or another drive if target drive is NTFS. See confirmation at https://support.microsoft.com/ru-ru/help/247627... - another account (agent) can create backup copy of EFS protected file. Reference: https://answers.microsoft.com/en-us/windows/forum/all/efs-copying-moving-files/a013bd25-fca9-475c-a4aa-15b8e2de3b51

Only user who encrit the file can change the drive as discussed in earlier questions

Answer1: user1,user2,user3 and user4 (moving an encrypted file on within the same drive is possible) Answer2: user1 only. (user1 must first decrypt the file to move the file to an other drive, en encrypt it again)(only user1 can decrypt the file)

Answer1: user1,user2,user3 and user4 (moving an encrypted file on within the same drive is possible) Answer2: user1 only. (user1 must fist decrypt the file to copy the file to an other drive, en encrypt it again)(only user1 only decrypt the file)

Does anyone already took the exam? What is your answer when you encountered this question? What if even though it is incorrect, it will still be tagged as correct? So you will lose a point?

Is the final answer correct or in the answer 2 would it be user 1 only?

Is the same principle of question 35 of this topic (topic2). EFS works by encrypting a file with a bulk symmetric key. The symmetric key that is used to encrypt the file is then encrypted with a public key that is associated with the user who encrypted the file. Because the encryption & decryption operations are performed at a layer below NTFS, it is transparent to the user and all their applications. The answer is correct. All users can be move file in the both folders.