Study. uk . com
  1. Home
  2. All questions
  3. Question 552

CompTIA Security+ study material · question 552 of 611

A laptop with full-disk encryption is stolen while running and unlocked. What protection remains?

  1. Protection of the boot partition only
  2. Little, because the key is unlocked and in memory while the system is in use
  3. Full protection, because the disk is encrypted
  4. Protection until the next reboot
Show the answer

Answer: B. Little, because the key is unlocked and in memory while the system is in use

Disk encryption protects data at rest on a powered-off device, which is a different situation from a running one.

Source: NIST SP 800-88 Rev. 1 (NIST) — SP 800-88 Rev. 1 § 2.6 Use of Cryptography and Cryptographic Erase

Challenge yourself on this topic → Study as cards