220-1102 Question #37: Real Exam Question with Answer & Explanation

Question

A technician is working with a company to determine the best way to transfer sensitive personal information between offices when conducting business. The company currently uses USB drives and is resistant to change. The company's compliance officer states that all media at rest must be encrypted. Which of the following would be the BEST way to secure the current workflow?

Options

• ADeploy a secondary hard drive with encryption on the appropriate workstation
• BConfigure a hardened SFTP portal for file transfers between file servers
• CRequire files to be individually password protected with unique passwords
• DEnable BitLocker To Go with a password that meets corporate requirements

Explanation

To secure sensitive personal information on USB drives in compliance with encryption at rest requirements, enabling BitLocker To Go is the best solution.

Approach. BitLocker To Go is a feature in Windows that allows full disk encryption for removable data drives, such as USB drives. By enabling BitLocker To Go with a strong password, the sensitive personal information stored on the USB drive will be encrypted at rest, directly addressing the compliance requirement and securing the data during transfer. This ensures that even if the USB drive is lost or stolen, the data remains protected.

Common mistakes.

• A. Deploying a secondary hard drive with encryption on a workstation does not secure the USB drives themselves, which are used for transfer between offices.
• B. Configuring an SFTP portal would change the workflow from USB drives to network transfers, which the company is resistant to, and does not address securing USB drives.
• C. Requiring individual files to be password protected is less secure and manageable than full-disk encryption like BitLocker To Go and can be cumbersome for large transfers.

Concept tested. Encrypting removable media

Reference. https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/bitlocker-to-go-faq

No community discussion yet for this question.