thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Encrypting File System (EFS)

Windows NTFS feature that encrypts individual files and folders using certificate-protected keys.

Definition

EFS encrypts files with a symmetric file encryption key that is protected by the user's public key certificate. A data recovery agent can be configured to recover files if the user's key is lost. It is file-level encryption and complements but differs from BitLocker volume encryption.

Example

Right-clicking a folder and selecting Advanced > Encrypt contents enables EFS.

Exam tip

EFS is file-level and tied to a user account; losing the certificate without a recovery agent loses the data.

Related terms