One of the most basic ways to protect the confidentiality of data on a laptop in the event the device is physically
stolen is to implement the following:

A.
File level encryption with alphanumeric passwords

B.
Biometric authentication and cloud storage

C.
Whole disk encryption with two-factor authentication

D.
BIOS passwords and two-factor authentication

Explanation:
Whole-disk encryption only provides reasonable protection when the system is fully powered off. To make the
most of the defensive strength of whole-disk encryption, a long, complex passphrase should be used to unlock
the system on bootup. Combining whole-disk encryption with two factor authentication would further increase
protection.