nerdexam
CompTIA

SY0-301 · Question #851

Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?

The correct answer is C. Full disk encryption. Full disk encryption ensures that data on a hard drive is unreadable without the decryption key, protecting it even when the drive cannot be physically sanitized before disposal.

Security operations

Question

Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized?

Options

  • AVirtualization
  • BPatch management
  • CFull disk encryption
  • DDatabase encryption

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    3% (1)
  • C
    92% (34)

Why each option

Full disk encryption ensures that data on a hard drive is unreadable without the decryption key, protecting it even when the drive cannot be physically sanitized before disposal.

AVirtualization

Virtualization abstracts hardware for workload management and does not address the security of data stored on a physical drive that cannot be sanitized.

BPatch management

Patch management addresses software vulnerability remediation and has no bearing on protecting data physically stored on a drive being decommissioned.

CFull disk encryptionCorrect

Full disk encryption encrypts every sector of a drive so that without the correct decryption key, the data is cryptographically unreadable. When a drive fails or cannot be sanitized through traditional means such as degaussing or shredding, the encrypted data remains protected, effectively mitigating the data loss risk.

DDatabase encryption

Database encryption protects only database files, leaving the rest of the data on the drive - including OS artifacts, logs, and other files - unprotected and potentially recoverable.

Concept tested: Full disk encryption for data-at-rest protection

Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/

Topics

#full disk encryption#data loss prevention#media sanitization#data at rest

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice