CompTIA A+ Core 2 (220-1102) — Question 627

The findings from a security audit indicate the risk of data loss from lost or stolen laptops is high. The company wants to reduce this risk with minimal impact to users who want to use their laptops when not on the network. Which of the following would BEST reduce this risk for Windows laptop users?

Answer options

• A. Requiring strong passwords
• B. Disabling cached credentials
• C. Requiring MFA to sign on
• D. Enabling BitLocker on all hard drives

Correct answer: D

Explanation

Enabling BitLocker on all hard drives encrypts the data, ensuring that even if a laptop is lost or stolen, the information remains protected and inaccessible without proper authentication. While requiring strong passwords, disabling cached credentials, and implementing MFA can enhance security, they do not provide the same level of data protection as full disk encryption, which is crucial for safeguarding sensitive information on lost or stolen devices.