A company is deploying laptops to replace all current desktop endpoints. This increases the risk of data loss. Which of the following is the BEST solution to address this risk?

The correct answer is D. Full disk encryption. Replacing desktops with laptops significantly increases the risk of physical theft or loss of the device, which directly threatens data confidentiality. Full disk encryption (D) encrypts the entire storage device, meaning that if a laptop is lost or stolen, the data remains…

Enterprise Security Architecture

Question

Options

AFile-level encryption
BTransit encryption
CRecord-level encryption
DFull disk encryption

How the community answered

(54 responses)

A
2% (1)
B
4% (2)
C
2% (1)
D
93% (50)

Explanation

Replacing desktops with laptops significantly increases the risk of physical theft or loss of the device, which directly threatens data confidentiality. Full disk encryption (D) encrypts the entire storage device, meaning that if a laptop is lost or stolen, the data remains unreadable without the decryption key - even if the drive is removed and connected to another machine. File-level encryption (A) only protects specifically encrypted files; unencrypted files, temp files, swap files, and OS artifacts remain exposed. Transit encryption (B) protects data moving over a network and does nothing for data at rest on a stolen device. Record-level encryption (C) is a database technique that encrypts individual records and is not applicable to general endpoint data protection. Full disk encryption is the industry-standard control for mitigating data loss risk on mobile endpoints.

Topics

#full disk encryption#endpoint security#data loss prevention#mobile endpoints

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice