Which data protection strategy prevents loss on stolen laptops?
Short answer
A Encryption at rest
Question
Key Takeaways
The question tests the ability to map a physical security threat (stolen hardware) to its corresponding logical control (encryption), specifically distinguishing between data in motion, at rest, and in use.
Encryption at rest is the required strategy to protect data stored on physical devices like laptops from unauthorized access if they are stolen. The community consensus confirms this as the standard control for mitigating physical theft risks.
Expert Analysis
Why the Answer Is Correct
Encryption at rest protects data stored on non-volatile media, such as hard drives or SSDs in laptops. If a laptop is stolen, the thief cannot read the data without the decryption key, effectively preventing data loss or exposure. This aligns with regulatory requirements and best practices for handling sensitive information on portable devices.
Why the Other Options Are Wrong
Masking (B) hides data values but does not secure the underlying storage against physical theft. Data classification (C) is an administrative process to categorize data sensitivity but offers no technical protection if the device is lost. Permission restrictions (D) rely on the operating system being accessible; if the drive is removed or booted from external media, these controls can often be bypassed.
Community Comment Notes
Users unanimously agreed on Encryption at rest because the scenario explicitly mentions 'stolen laptops,' implying the data is physically offline. Comments highlight that encryption ensures data remains inaccessible even if the hardware falls into malicious hands, making it the most robust defense for this specific threat vector.
Official Reference
https://csrc.nist.gov/publications/detail/sp/800-111/final
This link opens the official vendor documentation in a new tab.
Exam Strategy
Identify the state of the data (in use, in transit, or at rest) based on keywords like 'stolen,' 'transferred,' or 'processing.' For physical theft scenarios involving storage media, always prioritize encryption at rest over access controls.
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
dbrowndiver 👍 6 Answered AWhen a laptop is stolen, encryption at rest ensures that the data remains secure and inaccessible to the thief, as they would need the decryption key to access the files. Data Protection: Encryption at rest provides a robust layer of security for sensitive data, making it a common requirement for organizations handling confidential information. The primary concern with stolen laptops is unauthorized access to the data stored on them. Encryption at rest is the most effective way to prevent data loss in this scenario, as it keeps the data secure even if the device falls into the wrong hands.
-
9149f41 👍 1 Answered AWhen the device is stolen, the data will always be in rest. So the answer is easy: Encyption at rest.
-
Shaman73 👍 3A. Encryption at rest
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →