CompTIA CySA+ (CS0-002) — Question 335

Which of the following would best protect sensitive data if a device is stolen?

Answer options

• A. Remote wipe of drive
• B. Self-encrypting drive
• C. Password-protected hard drive
• D. Bus encryption

Correct answer: B

Explanation

A self-encrypting drive automatically encrypts the data stored on it, ensuring that even if the device is stolen, the data remains inaccessible without the appropriate keys. While a remote wipe can erase data and a password-protected hard drive adds a layer of security, they do not provide the same level of protection as self-encryption, which secures data at all times. Bus encryption is relevant for data in transit rather than for protecting data at rest on a device.