SY0-701 · Question #700
SY0-701 Question #700: Real Exam Question with Answer & Explanation
The correct answer is C: Full disk. Full disk encryption (FDE) is the correct choice because it automatically encrypts everything on the drive - the OS, swap space, temporary files, and all user data - ensuring no sensitive information is left exposed if a laptop is lost or stolen. Why the distractors are wrong: Vo
Question
A systems administrator needs to encrypt all data on employee laptops. Which of the following encryption levels should be implemented?
Options
- AVolume
- BPartition
- CFull disk
- DFile
Explanation
Full disk encryption (FDE) is the correct choice because it automatically encrypts everything on the drive - the OS, swap space, temporary files, and all user data - ensuring no sensitive information is left exposed if a laptop is lost or stolen.
Why the distractors are wrong:
- Volume (A): Volume encryption protects a logical volume, but may leave other areas (like the boot partition) unencrypted.
- Partition (B): Encrypting a single partition leaves other partitions - potentially containing OS files or temp data - unprotected.
- File (D): File-level encryption requires users to manually encrypt individual files, creating gaps and relying on user discipline; it does not protect the entire disk by default.
Memory tip: Think of the scenario - a stolen laptop. Only Full Disk encryption guarantees everything on that drive is unreadable from the moment the attacker powers it on, matching the "all data" requirement in the question stem. When you see "all data on laptops," map it to FDE.
Topics
Community Discussion
No community discussion yet for this question.