Exam MD-100 All Questions

View all questions & answers for the MD-100 exam

Exam MD-100 topic 3 question 32 discussion

Actual exam question from Microsoft's MD-100

Question #: 32
Topic #: 3

HOTSPOT -
You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.
Computer1 contains the local users shown in the following table.

Computer1 contains the folders shown in the following table.

The Users group has Full control permissions to Folder1, Folder2, and Folder3.
User1 encrypts two files named File1.docx and File2.docx in Folder1 by using EFS.
Which users can move each file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

EFS works by encrypting a file with a bulk symmetric key. The symmetric key that is used to encrypt the file is then encrypted with a public key that is associated with the user who encrypted the file. Because the encryption & decryption operations are performed at a layer below NTFS, it is transparent to the user and all their applications.
Box 1: User1, User2, and Administrator
Box 2: User1 only

by Anthony_2770 at Dec. 11, 2020, 12:31 a.m.

Comments

Submit Cancel

Anthony_2770

Highly Voted 4 years, 6 months ago

Incorrect Answer I tried this in a lab with the following results 1. All users can move the file to the same partition 2. Only User1 could move the file to a different partition Administrative privileges were asked for. Evan the administrator Certainly User2 could not do this Other observations anybody ????

upvoted 34 times

Anthony_2770

4 years, 6 months ago

I needed administrative privileges from User1 to move the file to Folder3, although User1 was not an administrator as such but the owner of the file.

upvoted 3 times

Anthony_2770

4 years, 6 months ago

For the file to move to another volume it MUST first be decrypted, and then re-encrypted, so only user1 can do that.

upvoted 15 times

MadMax2021

4 years, 4 months ago

Anthony_2770, as far as I understood, the second question regarding moving the file, it's only user 1? why admin can't do?

upvoted 1 times

AVP_Riga

4 years, 4 months ago

Only owner of the File has permission to move encrypted file to different disk. Folder1 and Folder2 are located in disk C, but Folder 3 located in disk D.

upvoted 2 times

...

AnoniMouse

4 years, 1 month ago

Totally agree with your reasoning 1. All users can move the file to the same partition 2. Only User1 could move the file to a different partition

upvoted 5 times

...

ercluff

3 years, 11 months ago

An administrator as a recovery agent can unencrypt the file(s). From a command line or powershell prompt, a recovery agent can issue the cipher command to manage and maintain encryption. (See MCA Modern Desktop Administrator Study Guide, Pg. 258, William Panek)

upvoted 1 times

...

SenorSpielbergo

Highly Voted 4 years, 4 months ago

Tested on 20H2. 1. All users. 2. Only User 1. Even Administrator could not move it.

upvoted 14 times

eufdf12342

4 years, 1 month ago

Agreed, same test here

upvoted 1 times

...

DestinysPower

Most Recent 2 years, 4 months ago

Users who can move File1.docx to Folder2: User1 only Explanation: Since File1.docx is encrypted with EFS, only User1 (the user who encrypted the file) will be able to access the file and move it to another folder. Users who can move File2.docx to Folder3: User1, User2, and Administrator Explanation: File2.docx is not encrypted with EFS, and the Users group has Full control permissions to Folder3. Therefore, any member of the Users group, including User1, User2, and Administrator, can move the file to Folder3.

upvoted 1 times

DestinysPower

2 years, 4 months ago

my mistake file 2 is also encrypted hence this also is possible for user 1 to move.

upvoted 1 times

...

flabezerra

2 years, 9 months ago

The answers provided from examtopics are correct with no issues at all. Smoothly results if you get it to a test lab. You will also learn about the prompt warning about encrypting only the file or the file and its parent folder. If you try something else like adding a new user the have access to the encrypted file, you will also learn that the new user must have a certificate to have access. Very interesting subject.

upvoted 1 times

...

Saad91

2 years, 10 months ago

On This website there are more Incorrect Answer than correct!!!!

upvoted 2 times

...

chrys

2 years, 12 months ago

And whoever said "EFS works below NTFS" doesn't have a clue how EFS actually works. EFS encrypts the file system, but not the data at a bit level. The encryption is TOTALLY dependent on NTFS. If you copy an EFS encrypted file to a non-EFS volume, or try to attach it to an email, the encryption cannot be enforced once the file leaves the control of the NTFS volume.

upvoted 1 times

chrys

2 years, 12 months ago

Sorry, I mean "non-NTFS volume"

upvoted 1 times

...

chrys

2 years, 12 months ago

Both the answer and explanation are wrong. I've already tried this in a lab. To MOVE an EFS encrypted file across partitions, you need to be BOTH the original file creator AND the administrator.

upvoted 1 times

...

raduM

3 years ago

only the user who encrypted the file can do that.

upvoted 1 times

...

raduM

3 years ago

incorrect answer, an encrypted file can only be moved by the owner. if you try to move the file you will be asked for admin rights and if you give in the the admin rights you will receive the error message you need permission from the owner to make changes. I am testing on 21h2

upvoted 1 times

...

Tsareena

3 years ago

Part 1 - All users Part 2 - User one Only, they created the encrypted file

upvoted 1 times

...

titi_ccm

3 years, 9 months ago

1.- all users 2.- only user1. The administrator can move with prompt

upvoted 1 times

...

CARIOCA

3 years, 9 months ago

Is the final answer correct or not? Which would be?

upvoted 1 times

...

tf444

3 years, 10 months ago

All three are members of the Users group that has Full control permissions to Folder1, Folder2, and Folder3. The answer is correct.

upvoted 1 times

...

Gromp

3 years, 11 months ago

nice try with this website but literally every question shows the wrong answers.

upvoted 1 times

...

CARIOCA

4 years ago

Essa questão ficou muito dividida no gabarito, afinal qual seria a resposta e qual a justificativa? Após um debate de 11 comentários, o gabarito é o mesmo ou não? Minha humilde sugestão seria ter um moderador oficial que dependendo do debate sobre a questão seria responsável por alterar o gabarito com justificativa. Acho que o debate é saudável, mas é preciso uma melhor organização seguindo um padrão estabelecido porque em algumas questões ficam muito confusos e geram mais dúvidas do que esclarecimentos.

upvoted 1 times

...

mllerena

4 years, 3 months ago

1903 All user Only user1

upvoted 3 times

...

Cisco

4 years, 3 months ago

I was able to move it as owner and as admin if I entered in admin credentials. Win 10 Enterprise 20H2 was what ID did it on.

upvoted 1 times

...

Load full discussion...