CompTIA CASP+ Practice Test

What security control should be checked by an auditor for laptops that access sensitive corporate data remotely?

1. Full disk encryption

2. Network segmentation

3. Two-factor authentication

4. Remote wipe capability

The correct answer is: Full disk encryption

When auditing laptops that access sensitive corporate data remotely, checking for full disk encryption is crucial. Full disk encryption protects the entire drive on the laptop, ensuring that all data stored on that device is encrypted. This means that if the laptop is lost or stolen, unauthorized individuals would not be able to access the sensitive information without the encryption keys. This control is particularly relevant for laptops used in remote settings, where the risk of loss or theft is heightened. The importance of this measure lies in the need for data confidentiality, especially when sensitive corporate information is being accessed outside the typical office environment. While network segmentation, two-factor authentication, and remote wipe capability are also important security controls, they serve different purposes. Network segmentation helps limit access to sensitive data within the infrastructure, two-factor authentication enhances access security, and remote wipe capability offers a way to delete data from a device if it is ever compromised. However, none of these controls provide the same level of protection for the data stored on the device itself as full disk encryption does. Thus, the focus on full disk encryption reflects its critical role in safeguarding sensitive data on laptops used remotely.