Quick Answer
The answer is to enable BitLocker, as it provides full disk encryption for laptop theft protection by scrambling all data on the drive so it is unreadable without the correct decryption key. Unlike simple password protection or screen locks, BitLocker secures the entire storage volume, meaning even if a thief removes the hard drive and connects it to another machine, the files remain inaccessible. On the CompTIA ITF+ FC0-U61 exam, this question tests your understanding of physical security controls versus software-based access controls—a common trap is confusing a strong login password with full disk encryption, but passwords only protect the OS login screen, not the raw data. Remember the memory tip: “BitLocker locks the bits,” meaning it encrypts every bit of data on the disk, not just the door to the operating system.
This FC0-U61 practice question tests your understanding of security. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A user wants to prevent unauthorized access to their laptop if stolen. Which is the best method?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "best"
Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Antivirus
Why wrong: Antivirus scans for malware but does not prevent access to files if stolen.
Use a strong password
Why wrong: A strong password protects login but can be bypassed by booting from another OS or removing the drive.
Firewall
Why wrong: A firewall controls network traffic but does not protect data on a stolen device.
Enable BitLocker
BitLocker encrypts the entire drive, protecting data even if the laptop is stolen.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Enable BitLocker
BitLocker is a full-disk encryption feature built into Windows that encrypts the entire drive, making data inaccessible without the decryption key. If the laptop is stolen, the thief cannot read any files even if they remove the hard drive and connect it to another system. This directly prevents unauthorized access to data, unlike other options that only protect against network or software threats.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Antivirus
Why it's wrong here
Antivirus scans for malware but does not prevent access to files if stolen.
Use a strong password
Why it's wrong here
A strong password protects login but can be bypassed by booting from another OS or removing the drive.
Firewall
Why it's wrong here
A firewall controls network traffic but does not protect data on a stolen device.
Enable BitLocker
Why this is correct
BitLocker encrypts the entire drive, protecting data even if the laptop is stolen.
Clue confirmation
The clue word "best" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
The trap here is that candidates confuse authentication (password) with encryption (BitLocker), assuming a strong password alone protects data against physical theft, but it only protects against casual login attempts, not direct disk access.
Detailed technical explanation
BitLocker uses AES encryption (typically 128-bit or 256-bit) with a TPM (Trusted Platform Module) to securely store the encryption key. In a real-world scenario, if a laptop with BitLocker enabled is stolen, the thief cannot extract data even by attaching the drive to a forensic workstation without the recovery key, which is often backed up to Active Directory or a Microsoft account.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
A practitioner preparing for the FC0-U61 exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Security — study guide chapter
Learn the concepts, then practise the questions
Security practice questions
Targeted practice on this topic area only
All FC0-U61 questions
512 questions across all exam domains
CompTIA ITF+ FC0-U61 study guide
Full concept coverage aligned to exam objectives
FC0-U61 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise FC0-U61 questions linked to IT Concepts and Terminology.
Practise FC0-U61 questions linked to Infrastructure.
Practise FC0-U61 questions linked to Applications and Software.
Practise FC0-U61 questions linked to Software Development Concepts.
Practise FC0-U61 questions linked to Security.
Practise FC0-U61 questions linked to Database Fundamentals.
Practise FC0-U61 questions linked to FC0-U61 fundamentals.
Practise FC0-U61 questions linked to FC0-U61 scenario.
Practise FC0-U61 questions linked to FC0-U61 troubleshooting.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Security — This question tests Security — Read the scenario before looking for a memorised answer..
The correct answer is: Enable BitLocker — BitLocker is a full-disk encryption feature built into Windows that encrypts the entire drive, making data inaccessible without the decryption key. If the laptop is stolen, the thief cannot read any files even if they remove the hard drive and connect it to another system. This directly prevents unauthorized access to data, unlike other options that only protect against network or software threats.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Yes — watch for: "best". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 25, 2026
This FC0-U61 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U61 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.