FC0-U71 Security Practice Question
A security administrator wants to protect data at rest on a laptop that may be lost or stolen. Which of the following is the BEST solution?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable full disk encryption
Full disk encryption (e.g., BitLocker or FileVault) encrypts the entire drive, making data inaccessible without the decryption key, protecting data at rest.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a VPN when connecting to the internet
Why it's wrong here
VPN protects data in transit, not at rest.
- ✗
Install a host-based firewall
Why it's wrong here
Firewalls control network traffic, not data at rest.
- ✓
Enable full disk encryption
Why this is correct
Correct. Full disk encryption protects data on the laptop.
- ✗
Implement strong password policies
Why it's wrong here
Passwords protect access but not data if the drive is removed.
Go deeper
Related to this question
About these practice questions
Courseiva writes every FC0-U71 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.