FC0-U71 Data confidentiality Practice Question
A user wants to protect their laptop in case it is stolen. Which TWO of the following measures would help protect the confidentiality of the data?
⚠ Common exam trap
The question asks for two measures, and the correct answers are full disk encryption (B) and a strong user account password (D). Option E (screen lock) only helps when the laptop is on and locked, but does not protect data if the device is shut down. Candidates should not confuse screen lock with full data protection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Full disk encryption
Full disk encryption (B) protects data at rest by rendering it unreadable without the encryption key, even if the drive is removed. A strong user account password (D) prevents unauthorized login, though it is less effective if the drive is removed. Options A (BIOS password) and C (VPN) do not protect data at rest. Option E (screen lock) only helps if the laptop is stolen while locked but does not protect data if the device is shut down. Thus, B and D are correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A strong password set in the BIOS
Why it's wrong here
A BIOS password prevents booting or changing settings but does not protect data if the drive is removed and accessed from another system.
- ✓
Full disk encryption
Why this is correct
Full disk encryption scrambles all data on the drive, making it inaccessible without the decryption key—a strong protection against theft.
- ✗
Using a VPN when connected to public Wi-Fi
Why it's wrong here
A VPN protects data in transit over public Wi-Fi, not data stored locally on the laptop.
- ✓
Using a strong password for the user account
Why this is correct
A strong user account password prevents unauthorized access to the OS, but if the drive is removed, data may still be readable; it is a partial but common measure.
- ✗
Enabling the screen lock with a password
Why it's wrong here
Enabling screen lock with a password deters casual access if the laptop is stolen while unlocked, but it does not protect data if the device is shut down or the drive is removed.
Go deeper
Related to this question
About these practice questions
One of 988 original FC0-U71 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on FC0-U71
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A security administrator wants to protect data at rest on a laptop that may be lost or stolen. Which of the following is the BEST solution?
hard- A.Use a VPN when connecting to the internet
- B.Install a host-based firewall
- ✓ C.Enable full disk encryption
- D.Implement strong password policies
Why C: Full disk encryption (e.g., BitLocker or FileVault) encrypts the entire drive, making data inaccessible without the decryption key, protecting data at rest.
Variation 2. A small business owner wants to protect customer data stored on laptops in case the devices are stolen. Which encryption method provides the best protection for the entire hard drive?
hard- A.HTTPS encryption for web traffic
- B.File-level encryption on individual documents
- C.A VPN when connecting to the internet
- ✓ D.Full disk encryption
Why D: Full disk encryption (e.g., BitLocker or FileVault) encrypts the entire drive, making data unreadable without the decryption key even if the physical device is stolen.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.