Full disk encryption (A)ensures that data stored on the device is protected even if the device is physically stolen. This is a fundamental security control for end-user devices, especially laptops and mobile devices, to prevent data breaches.
Endpoint protection (D)refers to anti-malware, antivirus, and host-based firewall solutions that safeguard end-user devices from malware, ransomware, and unauthorized access.
These measures are explicitly referenced in theCompTIA Security+ SY0-701exam objective2.2: Given a scenario, apply security concepts in support of organizational risk mitigationunderDevice hardening.
[Reference: CompTIA Security+ SY0-701 Official Exam Objectives, Domain 2.2 – “Device hardening (e.g., full disk encryption, antivirus/antimalware, endpoint detection and response).”, , , ]
Submit