One of the most basic ways to protect the confidentiality of data on a laptop in the event the device
is physically stolen is to implement which of the following?

A.
File level encryption with alphanumeric passwords

B.
Biometric authentication and cloud storage

C.
Whole disk encryption with two-factor authentication

D.
BIOS passwords and two-factor authentication

Explanation:
Whole-disk encryption only provides reasonable protection when the system is fully
powered off. to make the most of the defensive strength of whole-disk encryption, a long, complex
passphrase should be used to unlock the system on bootup. Combining whole-disk encryption
with two factor authentication would further increase protection.