CompTIA Security+ SY0-701 Practice Question

Implementing full-disk encryption encrypts the entire content of the hard drive, providing comprehensive protection by ensuring that data is encrypted, including system files and temporary files. This means that even if someone gains physical access to the laptop, they cannot access data without proper authentication. Encrypting sensitive files individually may leave some data unprotected and relies on users to properly secure each file. Using database encryption is not effective in this scenario because the concern is data stored on laptops, not databases. Implementing email encryption protects emails in transit and does not secure data stored on the device. Therefore, full-disk encryption is the most effective solution to protect data on lost or stolen laptops.