Full disk encryption is MOST effective against which of the following threats?

A.
Denial of service by data destruction

B.
Eavesdropping emanations

C.
Malicious code

D.
Theft of hardware

Explanation:
Full-disk encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be

stolen. However, it does not prevent the theft of hardware it only protects data should the device be stolen.
Incorrect Answers:
A: Denial of Service (DoS) attacks web-based attacks that exploit flaws in the operating system, applications, services, or protocols. These attacks can be
mitigated by means of firewalls, routers, and intrusion detection systems (IDSs) that detect DoS traffic, disabling echo replies on external systems, disabling
broadcast features on border systems, blocking spoofed packets on the network, and proper patch management.
B: Full-disk encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device be
stolen. It does not prevent eavesdropping.
C: Full-disk encryption encrypts the data on the device. This feature ensures that the data on the device cannot be accessed in a useable form should the device
be stolen. IT does not mitigate against malicious code.

Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 170- 172, 252