Exam 220-1102 topic 1 question 115 discussion

Bit locker is the answer.

The question has two requirements. Prevent data loss, minimal impact to users. MFA would impact users, they have to do an extra step to login. BitLocker encrypts the entire hard drive, thereby making the information "unreadable" in case of a lost laptop. Answer is D

The answer is definitely D: Bitlocker It is not "C" because the HDD can simply be removed from the case, and use a drive reader to directly access the files themselves without the use of a Windows Login/MFA.

Answer could be C because it simply involves knowledge factor & possession factor without requiring you to tamper with all the data on disks.

To reduce the risk of data loss from lost or stolen laptops for Windows laptop users, the BEST option is option D: Enabling BitLocker on all hard drives. BitLocker is a full disk encryption feature available in Windows operating systems. By enabling BitLocker, the data on the laptop's hard drives is encrypted, providing protection against unauthorized access in case of loss or theft. This ensures that even if the physical device is compromised, the data remains encrypted and inaccessible to unauthorized individuals.

The best way to reduce the risk of data loss from lost or stolen laptops is to enable BitLocker on all hard drives. BitLocker is a full disk encryption feature that encrypts all of the data on a laptop's hard drive. This makes it very difficult for unauthorized users to access the data on the laptop if it is lost or stolen.

Key phrases here are ‘reduce the risk’ & ‘BEST’ MFA fits those two .

D is the most correct answer to the specific question.

D is just not it, BitLocker will impact performance heavily. For example, With my T7300 2.0GHz and Kingston V100 64gb SSD the results are: Bitlocker off → on Sequential read 243 MB/s → 140 MB/s Sequential write 74.5 MB/s → 51 MB/s Random read 176 MB/s → 100 MB/s Enabling MFA negates the issue with stolen laptops because there is a multitude of ways to use mfa, something you have, something you know, something you are. Requiring users to use biometrics in conjunction with a password will have minimal impact. Therefore I am choosing C.

I think the reason for C is that you would need to access a key for using bitlocker which would increase the impact to the user. Any thoughts?

D. Enabling BitLocker on all hard drives

D for sure

D is the answer, no doubt