022.4 Data Storage Encryption (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which scenario is best suited for partition encryption rather than full disk encryption?

   • AA desktop computer used for gaming with no sensitive data stored on it
   • BA server that has a separate data partition for sensitive files, while the OS partition contains no confidential information
   • CA database server that stores all data in a single large partition
   • DA laptop that contains sensitive customer data and is frequently carried in public places
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following tools is an example of file-level encryption?

   • Adm-crypt
   • BLUKS
   • CBitLocker
   • DeCryptfs
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a usability trade-off of full disk encryption?

   • AUsers cannot access their files without an internet connection
   • BUsers must re-encrypt the entire disk every time they log out
   • CUsers must enter a password or provide a key to unlock the disk before the system can boot
   • DUsers are required to use a hardware token to access any file
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Why is it important to protect the master encryption key used for storage encryption?

   • ABecause the master key is used to encrypt network traffic
   • BBecause if the master key is compromised, all data encrypted with it can be decrypted by an attacker
   • CBecause the master key is used to authenticate users to the system
   • DBecause the master key is required to boot the operating system
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company issues laptops to employees who travel frequently. To protect sensitive customer data if a laptop is lost or stolen, the security team wants to encrypt the entire system drive, including the OS and all user files. They also want to minimize the performance impact on daily work. Which approach best meets these requirements?

   • AEncrypt only the user profile folders using EFS.
   • BUse a password-protected zip file for sensitive documents.
   • CEnable BitLocker with XTS-AES 128-bit encryption on the system drive.
   • DCreate a separate encrypted partition for sensitive files and leave the rest unencrypted.
   Reveal Solution Discussion Select an answer first