nerdexam
CompTIA

SY0-301 · Question #151

Which of the following is an advantage of implementing individual file encryption on a hard drive which already deploys full disk encryption?

The correct answer is C. Individually encrypted files will remain encrypted when copied to external media. Full Disk Encryption (FDE) protects data only while it resides on that specific encrypted drive. When a file is copied to external media (USB drive, cloud storage, another computer), FDE does not travel with it - the file becomes unprotected. However, if the file was…

General security concepts

Question

Which of the following is an advantage of implementing individual file encryption on a hard drive which already deploys full disk encryption?

Options

  • AReduces processing overhead required to access the encrypted files
  • BDouble encryption causes the individually encrypted files to partially lose their properties
  • CIndividually encrypted files will remain encrypted when copied to external media
  • DFile level access control only apply to individually encrypted files in a fully encrypted drive

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    4% (2)
  • C
    79% (42)
  • D
    11% (6)

Explanation

Full Disk Encryption (FDE) protects data only while it resides on that specific encrypted drive. When a file is copied to external media (USB drive, cloud storage, another computer), FDE does not travel with it - the file becomes unprotected. However, if the file was individually encrypted before being copied, that encryption persists on the destination media. This layered approach ensures the file remains protected regardless of where it is moved. Option A is wrong because adding a second encryption layer increases, not decreases, processing overhead. Option B is incorrect - double encryption does not cause files to lose encryption properties. Option D is wrong because file-level access controls (permissions) apply to files on any encrypted or unencrypted volume and are not exclusive to files with individual encryption.

Topics

#file encryption#full disk encryption#data portability#encryption layers

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice