SY0-301 · Question #851
Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?
The correct answer is C. Full disk encryption. Full disk encryption ensures that data on a hard drive is unreadable without the decryption key, protecting it even when the drive cannot be physically sanitized before disposal.
Question
Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?
Options
- AVirtualization
- BPatch management
- CFull disk encryption
- DDatabase encryption
How the community answered
(37 responses)- A5% (2)
- B3% (1)
- C92% (34)
Why each option
Full disk encryption ensures that data on a hard drive is unreadable without the decryption key, protecting it even when the drive cannot be physically sanitized before disposal.
Virtualization abstracts hardware for workload management and does not address the security of data stored on a physical drive that cannot be sanitized.
Patch management addresses software vulnerability remediation and has no bearing on protecting data physically stored on a drive being decommissioned.
Full disk encryption encrypts every sector of a drive so that without the correct decryption key, the data is cryptographically unreadable. When a drive fails or cannot be sanitized through traditional means such as degaussing or shredding, the encrypted data remains protected, effectively mitigating the data loss risk.
Database encryption protects only database files, leaving the rest of the data on the drive - including OS artifacts, logs, and other files - unprotected and potentially recoverable.
Concept tested: Full disk encryption for data-at-rest protection
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/
Topics
Community Discussion
No community discussion yet for this question.