nerdexam
CompTIA

SY0-301 · Question #687

Which of the following is the BEST method for ensuring all files and folders are encrypted on all corporate laptops where the file structures are unknown?

The correct answer is C. Whole disk encryption. When file structures are unknown, you cannot selectively choose which files or folders to encrypt - you would inevitably miss sensitive data. Whole disk encryption (such as BitLocker or FileVault) encrypts every sector of the drive automatically, including the OS, swap files…

Security architecture

Question

Which of the following is the BEST method for ensuring all files and folders are encrypted on all corporate laptops where the file structures are unknown?

Options

  • AFolder encryption
  • BFile encryption
  • CWhole disk encryption
  • DSteganography

How the community answered

(28 responses)
  • B
    7% (2)
  • C
    89% (25)
  • D
    4% (1)

Explanation

When file structures are unknown, you cannot selectively choose which files or folders to encrypt - you would inevitably miss sensitive data. Whole disk encryption (such as BitLocker or FileVault) encrypts every sector of the drive automatically, including the OS, swap files, temp files, and all user data, regardless of where files are stored. Folder encryption (A) and file encryption (B) require knowing which items to target. Steganography (D) hides data inside other files and is not an encryption solution for securing laptop storage.

Topics

#whole disk encryption#laptop security#data at rest#FDE

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice