nerdexam
CompTIA

CAS-005 · Question #203

An organization with a remote workforce has a new client with the following requirements: - Consultants need to travel to the client site. - The company has proprietary information on its hard…

The correct answer is D. Host-based encryption. For a remote workforce traveling with company-owned devices containing proprietary information, implementing host-based encryption is the most beneficial measure to protect data.

Submitted by skyler.x· Mar 6, 2026Security Engineering

Question

An organization with a remote workforce has a new client with the following requirements:

  • Consultants need to travel to the client site.
  • The company has proprietary information on its hard drives.
  • The company prohibits BYOD.

Which of the following would be the most beneficial for the organization to implement?

Options

  • AVirtual hardware
  • BMeasured boot
  • CSecure enclave
  • DHost-based encryption

How the community answered

(28 responses)
  • A
    18% (5)
  • B
    4% (1)
  • C
    7% (2)
  • D
    71% (20)

Why each option

For a remote workforce traveling with company-owned devices containing proprietary information, implementing host-based encryption is the most beneficial measure to protect data.

AVirtual hardware

Virtual hardware does not directly protect proprietary data on the physical hard drives of traveling devices from loss or theft.

BMeasured boot

Measured boot verifies the integrity of the boot process but does not protect data at rest on the hard drive from being accessed if the device is stolen.

CSecure enclave

Secure enclave provides a secure environment for sensitive processing but does not encrypt or protect all proprietary data stored on the entire hard drive from physical compromise.

DHost-based encryptionCorrect

Host-based encryption, such as full disk encryption, protects proprietary information stored on the hard drives of laptops, which is crucial for consultants traveling. This safeguards data against unauthorized access if a device is lost or stolen, directly addressing the need to protect data on company hardware without relying on BYOD.

Concept tested: Data at rest protection for mobile devices

Source: https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice