What encryption approach protects all data by encrypting the entire disk?

What encryption approach protects all data by encrypting the entire disk?

• A. File level encryption
• B. Disk level encryption
• C. Data in transit
• D. VPN

Answer: (B)

Disk-level encryption, also called full-disk encryption, protects everything stored on the drive by encrypting the entire disk. It ensures data at rest remains unreadable without the encryption key, so even if the device is stolen, the contents aren’t accessible. The system decrypts data on the fly as it’s used after you authenticate, protecting all files, OS data, and free space. File-level encryption only encrypts selected files or folders, leaving other parts of the disk potentially unprotected. Data in transit and VPN refer to encryption while data is moving across a network, not the data stored on disk. They don’t protect what’s physically on the disk when the device isn’t in use. Hence, the complete disk encryption approach best matches the goal of securing all disk data.

Disk-level encryption, also called full-disk encryption, protects everything stored on the drive by encrypting the entire disk. It ensures data at rest remains unreadable without the encryption key, so even if the device is stolen, the contents aren’t accessible. The system decrypts data on the fly as it’s used after you authenticate, protecting all files, OS data, and free space.

File-level encryption only encrypts selected files or folders, leaving other parts of the disk potentially unprotected. Data in transit and VPN refer to encryption while data is moving across a network, not the data stored on disk. They don’t protect what’s physically on the disk when the device isn’t in use. Hence, the complete disk encryption approach best matches the goal of securing all disk data.