022.4 Data Storage Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses BitLocker on all employee laptops. The security team wants to ensure that recovery keys are available if an employee forgets their PIN or the system fails to boot. Which practice is most appropriate for managing BitLocker recovery keys?

   • AStore recovery keys in Active Directory Domain Services (AD DS).
   • BPrint recovery keys and store them in the employee's desk drawer.
   • CSave recovery keys on a USB drive attached to the laptop.
   • DEmail recovery keys to employees for their personal records.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following tools is commonly used for full disk encryption on Linux systems?

   • ABitLocker
   • BLUKS
   • CEncFS
   • DeCryptfs
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A Linux server hosts a database that stores sensitive financial records. The OS and applications are on a separate disk, and the database files are on a dedicated data volume. The administrator wants to protect the database files at rest without encrypting the entire OS disk. Which solution is most appropriate?

   • ASet file permissions to restrict access to the database files.
   • BUse eCryptfs to encrypt the database files.
   • CEncrypt the data volume using LUKS.
   • DEncrypt the entire OS disk using LUKS.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a defining characteristic of full disk encryption (FDE)?

   • AIt encrypts the entire storage device, including the operating system, applications, and all user data
   • BIt encrypts only the files and folders that a user explicitly selects
   • CIt encrypts data only when it is transmitted over a network
   • DIt requires a separate encryption key for each individual file
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does partition encryption differ from full disk encryption?

   • APartition encryption encrypts individual files, while full disk encryption encrypts the entire disk
   • BPartition encryption is faster than full disk encryption because it uses a weaker algorithm
   • CPartition encryption encrypts only the data within a specific partition, while full disk encryption encrypts the entire storage device
   • DPartition encryption is only available on Windows, while full disk encryption is only available on Linux
   Reveal Solution Discussion Select an answer first