Which Encryption Technique Should Be Used to Protect Laptop Data?
A security administrator would like to protect data on employees’ laptops. Which of the following encryption techniques should the security administrator use?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam focuses on the scope of protection: Full Disk Encryption covers the whole drive, whereas partition encryption only protects one volume and can leave other data exposed.
For the SY0-701 exam, the correct answer is Full Disk Encryption (FDE). This technique encrypts the entire storage drive, protecting the operating system, applications, and all user files on a laptop.
Choosing Partition encryption because it seems more targeted actually leaves other partitions unencrypted, allowing a threat actor to steal data from unprotected volumes.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Full Disk Encryption (FDE) is the only option that protects all data on a laptop's storage device. As a community comment explains, it encrypts the entire hard drive, including the OS, files, and app data, ensuring that sensitive information is protected even if the device is lost or stolen. This is the standard solution for protecting data at rest on endpoints.Why the Other Options Are Wrong
Partition encryption only encrypts a specific partition, so other partitions may remain unencrypted, leaving data exposed. Asymmetric encryption is used for encryption/decryption keys and data in transit, not for protecting data stored on a laptop's drive. Database encryption applies only to database contents, not to the full laptop storage, and is irrelevant for general laptop data protection.Community Comment Notes
The most helpful comment (9 likes) correctly identifies Full Disk Encryption and clearly explains why partition encryption is insufficient. Another comment (4 likes) succinctly defines FDE as encrypting the entire hard drive. All comments agree on answer C, reinforcing that this is a straightforward concept question about the scope of encryption methods.Official Reference
Exam Strategy
When the question mentions 'protect data on laptops,' think about data at rest and the entire device. Eliminate options like asymmetric (used for key exchange and data in transit) and database encryption (narrow scope), and remember that partition encryption only protects one logical drive, not the whole laptop.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →