Question 63

Full Disk Encryption (FDE) should be used to ensure an attacker is unable to read the contents of a mobile device’s drive if the device is lost.

Full Disk Encryption (FDE) is a crucial security measure that encrypts all data on a mobile device's drive, ensuring that even if the device is lost or stolen, the data remains inaccessible to unauthorized users.

A) TPM

Trusted Platform Module (TPM) is a hardware-based security feature that provides secure cryptographic functions and key storage, but it does not encrypt the entire drive by itself. While TPM can assist in securing encryption keys for FDE, it does not serve the primary function of preventing data access upon loss of the device.

B) ECC

Elliptic Curve Cryptography (ECC) is a form of public key cryptography used for secure communications and key exchange. However, ECC does not provide data encryption on a mobile device's drive and thus cannot prevent unauthorized access to data if the device is lost.

C) FDE

Full Disk Encryption (FDE) encrypts the entire contents of a device's drive, making it impossible for an attacker to access any data without the proper authentication. In the event of loss or theft, FDE protects sensitive information by rendering it unreadable without the decryption key.

D) HSM

Hardware Security Module (HSM) is used to manage and protect cryptographic keys but does not encrypt the data on a mobile device’s drive. While HSM can enhance overall security, it does not directly address the concern of securing data in the event of device loss.

Conclusion

FDE is the most effective solution for ensuring that data on a mobile device remains secure and inaccessible if the device is lost. Unlike the other options, which serve different security functions, FDE directly addresses the risk of data exposure by encrypting all contents on the device's drive. Thus, FDE is the definitive choice for protecting sensitive information in such scenarios.