Which security solution would prevent a user from reading a file that they did not create?

The correct choice is EFS, which stands for Encrypting File System. EFS is a feature built into certain versions of Windows that allows users to encrypt individual files or folders. When a file is encrypted with EFS, only the user who encrypted the data can read it, provided they log in with their user account that has the appropriate encryption key.

Therefore, if a user attempts to access a file that they did not create or do not have permission to decrypt, they will be unable to read that file, as EFS effectively secures the data against unauthorized access. This mechanism is particularly useful in environments where sensitive information needs to be protected from users who do not have a legitimate need to view it.

The other options relate to security but have different purposes and do not directly provide the same level of file-level access control:

• BitLocker, for instance, is a full-disk encryption tool that secures the entire drive rather than individual files, making it beneficial for protecting data from theft or loss but not specifically designed to restrict access to individual files based on their creator.

• IPsec is a protocol suite for securing Internet Protocol (IP) communications and typically implements security at the network layer, focusing on securing IP packets in transit rather than