A user's corporate laptop with proprietary work information was stolen from a coffee shop. The user logged in to the laptop with a simple password, and no other security mechanisms were in place…

Biometrics authenticate the user to the system but do not protect data on the disk if the disk is removed and accessed directly.

Full disk encryption (FDE) encrypts all data on the hard drive, making it unreadable without the correct decryption key, thereby protecting data even if the attacker bypasses login credentials or removes the drive.

An enforced strong system password protects access to the operating system but would not prevent an attacker from removing the hard drive and accessing the data directly from another system.

Two-factor authentication adds an extra layer of security to the login process but does not protect data if the physical storage device is removed and accessed independently.