62. An organization experiences data loss after several employees traveled to an area that is well-known for corporate espionage. The employees always used VPNs when connected to the hotel Wi-Fi, logged off their machines when not in use, and kept their doors locked when leaving their devices unattended. Which of the following will best prevent data loss events in the future?
Answer: C
Full Disk Encryption (FDE) will best prevent data loss events in the future.
Implementing Full Disk Encryption (FDE) ensures that all data on devices is encrypted, making it inaccessible to unauthorized users even if the devices are lost or stolen. This is particularly important in environments susceptible to corporate espionage, as it safeguards sensitive information from being exploited.
A) Data sanitization
Data sanitization involves the process of removing sensitive data from storage devices before disposal or reuse. While it is crucial for protecting data at the end of a device's lifecycle, it does not provide real-time protection for data currently on devices, making it ineffective in preventing data loss during travel.
B) WAF
A Web Application Firewall (WAF) is designed to monitor and filter HTTP traffic to and from web applications, primarily protecting against web-based attacks. However, it does not address data security on physical devices themselves, thus failing to prevent data loss in a scenario involving physical theft or unauthorized access.
C) FDE
Full Disk Encryption (FDE) protects the entire contents of a disk by encrypting the data stored on it. This measure is particularly effective against data loss during travel, as even if a device is compromised, the data remains secure and unreadable without the proper decryption key.
D) Split tunneling
Split tunneling allows users to route some of their internet traffic through a VPN while sending other traffic directly to the internet. This can expose sensitive data to potential threats, especially in insecure environments. Thus, it does not provide a comprehensive solution to prevent data loss in high-risk situations.
Conclusion
Full Disk Encryption (FDE) is the most effective solution for preventing data loss, especially in environments vulnerable to espionage. Other options, such as data sanitization, WAF, and split tunneling, either do not provide adequate protection for data currently in use or focus on different aspects of data security. Therefore, implementing FDE is essential for safeguarding sensitive information against unauthorized access.