CAS-001 · Question #510
CAS-001 Question #510: Real Exam Question with Answer & Explanation
The correct answer is B: Full disk encryption. The primary risk here is physical loss or theft of a laptop while outside the corporate perimeter. Since applications require local caches of sensitive PII data, that data exists on the disk in plaintext unless protected. Full Disk Encryption (FDE) ensures that even if a device i
Question
Options
- ATrusted operating systems
- BFull disk encryption
- CHost-based firewalls
- DCommand shell restrictions
Explanation
The primary risk here is physical loss or theft of a laptop while outside the corporate perimeter. Since applications require local caches of sensitive PII data, that data exists on the disk in plaintext unless protected. Full Disk Encryption (FDE) ensures that even if a device is stolen, the data remains unreadable without the decryption credentials. Trusted operating systems (A) help with OS integrity but don't protect cached data from physical access. Host-based firewalls (C) protect against network-based attacks, not physical theft. Command shell restrictions (D) limit what users can do on the OS but don't protect data at rest. FDE directly addresses the confidentiality risk of sensitive data leaving the corporate boundary on mobile hardware.
Community Discussion
No community discussion yet for this question.