A company is deploying laptops for its field technicians who will have access to sensitive customer data. To ensure the data remains protected in case of device theft or loss, which is the BEST solution to secure the data?
File-level encryption for each customer data file
Full-Disk Encryption (FDE)
Partition encryption on the customer data directory
Database encryption for the customer information database application
The correct answer is Full-Disk Encryption (FDE) because it encrypts the entire hard drive of the laptop, including the operating system, and ensures that all data on the device is protected. This is most effective for devices like laptops that can easily be stolen or misplaced, protecting against unauthorized access even if the laptop is turned off.
Partition encryption would only encrypt a specific partition of the hard drive, which means sensitive data stored outside of this partition would not be protected. File-level encryption would protect individual files, but it would not necessarily secure system files or temporary files that could contain sensitive data. Database encryption focuses on protecting data within a database and is not typically applied to the entire storage system of a laptop.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Full-Disk Encryption (FDE) and how does it work?
Open an interactive chat with Bash
What are the differences between Full-Disk Encryption and file-level encryption?
Open an interactive chat with Bash
Why is it important to use encryption when handling sensitive customer data?