A company's security team is implementing various encryption strategies to protect the organization's data at rest. If they need to ensure the confidentiality of entire drives on employees' laptops which could be easily stolen or lost, which encryption method would be most appropriate?
Full-disk encryption is the correct choice because it encrypts the entire hard drive, including the operating system, applications, and all files. This ensures that if the laptop is lost or stolen, the data on it remains protected and inaccessible without the proper credentials or decryption key. Partition encryption would only protect specific partitions, which might leave other sensitive data exposed. File encryption is more granular and would not provide the broad protection needed for this scenario. Database encryption is intended for protecting data within databases and does not address the potential risk of entire drives being accessed through theft or loss.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is full-disk encryption and how does it work?
Open an interactive chat with Bash
What are some common encryption algorithms used in full-disk encryption?
Open an interactive chat with Bash
What are the advantages of full-disk encryption compared to other encryption types?