Assessment Worksheet
Configuring BitLocker and Windows Encryption
Overview
In this lab, you used the Microsoft Encrypting File System (EFS) to encrypt files and folders on a Windows Server 2012 machine. You documented the success or failure of your encryption efforts. You also installed Microsoft BitLocker Drive Encryption, a data protection feature that is used to resist data theft and the risk of exposure from lost, stolen, or decommissioned computers. You encrypted a data drive on the remote server and decrypted it using a recovery key.
Lab Assessment Questions & Answers
1. Within a Microsoft Windows Server 2012 environment, who has access rights to the EFS features and functions in the server?
2. What are some best practices you can implement when encrypting BitLocker drives and the use of BitLocker recovery passwords?
3. What was the recovery key generated by BitLocker in this lab?
4. How would you grant additional users access rights to your EFS encrypted folders and data files?
5. What are the main differences between EFS and BitLocker?
6. The customer privacy data policy in your company's data classification standard requires encryption in two places: data stored locally or on a LAN, and data stored on a laptop. Describe your solution for meeting this policy requirement.