Which encryption type would have prevented stolen corporate information from laptops if properly applied?

Which encryption type would have prevented stolen corporate information from laptops if properly applied?

• A. DFS Encryption
• B. EFS Encryption
• C. SDW Encryption
• D. IPS Encryption

Answer: (B)

Protecting data at rest on a stolen laptop relies on file-level encryption tied to the user’s credentials. Encrypting File System (EFS) encrypts individual files and folders on NTFS volumes using the user’s public/private key pair. When EFS is properly applied, those files remain unreadable without the user’s corresponding private key, so simply losing the laptop doesn’t expose the data. This is why EFS is the best fit for preventing access to stolen corporate information stored on laptops. Other options don’t fit as well. Encryption for DFS focuses on protecting data as it moves across the network, not on the local disk. SDW encryption isn’t a standard, widely used on-disk option in this context, and IPS encryption refers to network security devices rather than protecting data at rest on the device.

Protecting data at rest on a stolen laptop relies on file-level encryption tied to the user’s credentials. Encrypting File System (EFS) encrypts individual files and folders on NTFS volumes using the user’s public/private key pair. When EFS is properly applied, those files remain unreadable without the user’s corresponding private key, so simply losing the laptop doesn’t expose the data. This is why EFS is the best fit for preventing access to stolen corporate information stored on laptops.

Other options don’t fit as well. Encryption for DFS focuses on protecting data as it moves across the network, not on the local disk. SDW encryption isn’t a standard, widely used on-disk option in this context, and IPS encryption refers to network security devices rather than protecting data at rest on the device.