Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 464 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 464
Topic #: 1
[All 312-49v10 Questions]

NTFS sets a flag for the file once you encrypt it and creates an EFS attribute where it stores Data Decryption Field (DDF) and Data Recovery Field (DDR). Which of the following is not a part of DDF?

  • A. Encrypted FEK
  • B. Checksum
  • C. EFS Certificate Hash
  • D. Container Name
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
aqeel1506
4 months ago
In the context of NTFS and EFS (Encrypting File System), the Data Decryption Field (DDF) includes: Encrypted FEK: The File Encryption Key used to encrypt the file data. Checksum: Used for verifying the integrity of the encrypted data. EFS Certificate Hash: Part of the cryptographic information used to decrypt the file. Container Name is not part of the Data Decryption Field (DDF). It is not included in the EFS attributes related to encryption and decryption directly. so the answer is D container name
upvoted 1 times
...
jingu_bingo
5 months, 3 weeks ago
Selected Answer: B
CHFIv11 page 245. checksum is included in the Header, NOT the DDF.
upvoted 1 times
...
Elb
6 months ago
B > The DDF contains: User SID Container Name Provider Name EFS Certificate Hash Encrypted FEK
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...