4.1. Task 4.1: The Encrypting File System

Windows 2000 and above provides security for files in storage on NTFS volumes. This is called the Encrypting File System (EFS). EFS operates as an additional layer of security, complementing both the NTFS and share-point permissions on Windows systems.

EFS should be implemented for any sensitive data. Because of the increased frequency of portable devices being lost or stolen, it is especially important to implement EFS on laptop computers.

4.1.1. Scenario

You are responsible for the protection of sensitive information that often gets produced and utilized on company-owned laptop computers. On occasion, these laptops and sensitive files must be shared among several top-level executives of the company. ...

Get Security Administrator Street Smarts: A Real World Guide to CompTIA Security+™ Skills, Second Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.