CompTIA Security+ (SY0-601) — Question 747

A technician enables full disk encryption on a laptop that will be taken on a business trip. Which of the following does this process BEST protect?

Answer options

• A. Data in transit
• B. Data in processing
• C. Data at rest
• D. Data tokenization

Correct answer: C

Explanation

Full disk encryption primarily secures data at rest, ensuring that stored information is protected from unauthorized access. Options A and B refer to data while being transmitted or processed, which encryption does not directly address in this context. Option D, data tokenization, is a separate security measure that replaces sensitive data with unique identifiers and is not related to disk encryption.