A company wants to ensure that if any of its laptops are lost or stolen, data stored on them remains inaccessible to unauthorized users. Which of the following is the BEST method to achieve this?
Implement full-disk encryption on the laptops
Encrypt sensitive files individually on the laptops
Use database encryption for all company databases
Implement email encryption for company communications
Implementing full-disk encryption encrypts the entire content of the hard drive, providing comprehensive protection by ensuring that data is encrypted, including system files and temporary files. This means that even if someone gains physical access to the laptop, they cannot access data without proper authentication. Encrypting sensitive files individually may leave some data unprotected and relies on users to properly secure each file. Using database encryption is not effective in this scenario because the concern is data stored on laptops, not databases. Implementing email encryption protects emails in transit and does not secure data stored on the device. Therefore, full-disk encryption is the most effective solution to protect data on lost or stolen laptops.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is full-disk encryption, and how does it work?
Open an interactive chat with Bash
How does full-disk encryption compare to file-level encryption?
Open an interactive chat with Bash
What happens if I lose the authentication credential for full-disk encryption?