312-50V9 Question #276: Real Exam Question with Answer & Explanation

The correct answer is D: Full disk encryption.. Full disk encryption protects all data on a laptop even if the physical drive is removed and accessed on another machine. Other options can be trivially bypassed without the encryption key.

Question

Sophia travels a lot and worries that her laptop containing confidential documents might be stolen. What is the best protection that will work for her?

Options

APassword protected files
BHidden folders
CBIOS password
DFull disk encryption.

Explanation

Full disk encryption protects all data on a laptop even if the physical drive is removed and accessed on another machine. Other options can be trivially bypassed without the encryption key.

Common mistakes.

A. Password-protected files only secure individual files the user explicitly locks, leaving the rest of the file system fully readable to anyone with physical access.
B. Hidden folders rely on security through obscurity and are visible to any attacker using basic directory listing tools or a different OS.
C. A BIOS password can be reset by removing the CMOS battery, and it does not prevent an attacker from removing the hard drive and reading it in another machine.

Concept tested. At-rest data protection with full disk encryption

Reference. https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice