SC-900 Practice Question: Describe the concepts of security, compliance, and identity
A company deploys full disk encryption on all employee laptops to protect data in case a device is lost or stolen. Which security goal does this measure primarily address?
⚠ Common exam trap
A common mix-up: candidates confuse encryption with integrity or availability, mistakenly thinking encryption also prevents data tampering or ensures data is always accessible, but encryption only addresses unauthorized reading (confidentiality).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Confidentiality
Full disk encryption (FDE) ensures that data stored on the laptop's hard drive is unreadable without the correct decryption key. This directly protects the confidentiality of the data by preventing unauthorized access if the device is lost or stolen, as the encrypted data cannot be deciphered without the key.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Confidentiality
Why this is correct
Full disk encryption (FDE) directly addresses confidentiality by rendering all data on a laptop unreadable to unauthorized individuals. If the device is lost or stolen, the encrypted data remains protected, preventing its disclosure without the correct decryption key. This ensures that only authorized users or processes can access and interpret the sensitive information stored on the drive.
- ✗
Integrity
Why it's wrong here
Integrity is concerned with ensuring that data has not been altered or tampered with, either accidentally or maliciously. While some advanced cryptographic modes can offer integrity, full disk encryption primarily focuses on preventing unauthorized viewing of data, not detecting or preventing its modification. Mechanisms like cryptographic hashing or digital signatures are typically employed to provide robust data integrity guarantees.
- ✗
Availability
Why it's wrong here
Availability ensures that authorized users can access information and systems reliably when needed. Full disk encryption does not inherently improve or guarantee system availability; its purpose is data protection, not access assurance. In fact, issues such as lost encryption keys or corrupted boot sectors could potentially hinder access, demonstrating that FDE's primary role is distinct from ensuring continuous operational access.
- ✗
Non-repudiation
Why it's wrong here
Non-repudiation provides undeniable proof of an action or event, preventing an entity from falsely denying their involvement. This security principle is typically achieved through digital signatures or audit trails that cryptographically link an specific action to a specific identity. Full disk encryption secures data at rest but does not establish proof of origin or action, therefore it does not contribute to non-repudiation.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Disk encryption
Disk encryption is the process of converting data on a storage device into a coded form that can only be read with the correct decryption key, protecting it from unauthorized access.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.