CAS-005 Question #203: Real Exam Question with Answer & Explanation

Question

An organization with a remote workforce has a new client with the following requirements: - Consultants need to travel to the client site. - The company has proprietary information on its hard drives. - The company prohibits BYOD. Which of the following would be the most beneficial for the organization to implement?

Options

• AVirtual hardware
• BMeasured boot
• CSecure enclave
• DHost-based encryption

Explanation

For a remote workforce traveling with company-owned devices containing proprietary information, implementing host-based encryption is the most beneficial measure to protect data.

Common mistakes.

• A. Virtual hardware does not directly protect proprietary data on the physical hard drives of traveling devices from loss or theft.
• B. Measured boot verifies the integrity of the boot process but does not protect data at rest on the hard drive from being accessed if the device is stolen.
• C. Secure enclave provides a secure environment for sensitive processing but does not encrypt or protect all proprietary data stored on the entire hard drive from physical compromise.

Concept tested. Data at rest protection for mobile devices

Reference. https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview

No community discussion yet for this question.