Which Encryption Technique Should Be Used to Protect Laptop Data?
Short answer
C Full disk
Question
Key Takeaways
The exam focuses on the scope of protection: Full Disk Encryption covers the whole drive, whereas partition encryption only protects one volume and can leave other data exposed.
For the SY0-701 exam, the correct answer is Full Disk Encryption (FDE). This technique encrypts the entire storage drive, protecting the operating system, applications, and all user files on a laptop.
Common mistake: Choosing Partition encryption because it seems more targeted actually leaves other partitions unencrypted, allowing a threat actor to steal data from unprotected volumes.
Expert Analysis
Why the Answer Is Correct
Full Disk Encryption (FDE) is the only option that protects all data on a laptop's storage device. As a community comment explains, it encrypts the entire hard drive, including the OS, files, and app data, ensuring that sensitive information is protected even if the device is lost or stolen. This is the standard solution for protecting data at rest on endpoints.
Why the Other Options Are Wrong
Partition encryption only encrypts a specific partition, so other partitions may remain unencrypted, leaving data exposed. Asymmetric encryption is used for encryption/decryption keys and data in transit, not for protecting data stored on a laptop's drive. Database encryption applies only to database contents, not to the full laptop storage, and is irrelevant for general laptop data protection.
Community Comment Notes
The most helpful comment (9 likes) correctly identifies Full Disk Encryption and clearly explains why partition encryption is insufficient. Another comment (4 likes) succinctly defines FDE as encrypting the entire hard drive. All comments agree on answer C, reinforcing that this is a straightforward concept question about the scope of encryption methods.
Official Reference
- https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview
- https://csrc.nist.gov/publications/detail/sp/800-111/final
- https://csrc.nist.gov/glossary/term/full_disk_encryption
These links open the official vendor documentation in a new tab.
Exam Strategy
When the question mentions 'protect data on laptops,' think about data at rest and the entire device. Eliminate options like asymmetric (used for key exchange and data in transit) and database encryption (narrow scope), and remember that partition encryption only protects one logical drive, not the whole laptop.
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 4 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 4
-
rjbb 👍 9 Answered CThe answer is C - Fulldisk encryption, this encrypts the whole storage drive of the device, including OS, files, app data, etc. the reason its not the other options partition encryption - only encrypts the partition, meaning if there are multiple partitions then some of them could be left unencrypted and a threat actor could steal data in them. Asymmetric encryption - is an encryption technique using Public Key, private key methodology. Database encryption - is used to encrypt databases (schema) or data within the databases.
-
Abcd123321 👍 4 Answered CFull Disk Encryption (FDE) ○ Encrypts the entire hard drive
-
PAWarriors 👍 2 Answered CAnswer is C --> Full disk encryption encrypts the entire hard drive to protect all of the data being stored on it, hence protecting the user's laptop
-
Th3irdEye 👍 2 Answered CI think it's C
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →