A security administrator at a company which implements key escrow and symmetric encryption only, needs to
decrypt an employee’s file. The employee refuses to provide the decryption key to the file. Which of the
following can the administrator do to decrypt the file?

A.
Use the employee’s private key

B.
Use the CA private key

C.
Retrieve the encryption key

D.
Use the recovery agent

Explanation:
Key escrow addresses the possibility that a third party may need to access keys. Under the conditions of key
escrow, the keys needed to encrypt/decrypt data are held in an escrow account and made available if that third
party requests them. The third party in question is generally the government, but it could also be an employer if
an employee’s private messages have been called into question.