mediumMultiple ChoiceObjective-mapped
SSCP Practice Question: A company's policy requires that all data at rest…
A company's policy requires that all data at rest be encrypted. Which of the following is the most effective method to encrypt files on a laptop?
⚠ Common exam trap
A common mix-up: candidates choose encrypting only the home folder or individual files because they think it is sufficient, but they overlook that system areas like swap, temp, and hibernation files can contain sensitive data in plaintext, making full disk encryption the only comprehensive solution for data at rest on a laptop.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement full disk encryption (FDE).
Full disk encryption (FDE) encrypts the entire storage volume, including the operating system, swap files, temporary files, and all user data. This ensures that if the laptop is lost or stolen, all data at rest is protected without relying on the user to selectively encrypt files or folders, which can leave sensitive data exposed in unencrypted system areas.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Encrypt only the user's home folder.
Why it's wrong here
Other system areas may contain sensitive data, so partial encryption is insufficient.
- ✗
Encrypt individual files using a symmetric key.
Why it's wrong here
Individual file encryption is less comprehensive and harder to manage.
- ✓
Implement full disk encryption (FDE).
Why this is correct
FDE provides blanket encryption for the entire drive.
- ✗
Use a self-extracting encrypted archive.
Why it's wrong here
Archives are not persistent protection for all data.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.