100-140 Question 36
Select 3A company has decided to implement a new security policy requiring all laptops to have full disk encryption enabled. As part of the IT support team, you have been tasked with making the necessary changes to implement this plan. Which steps are required to ensure the successful implementation of this security policy?
- A
Verify that all laptops support full disk encryption and have compatible hardware.
- B
Communicate the policy to end-users and provide instructions for enabling encryption.
- C
Manually encrypt only the devices of users who request it.
- D
Ensure that recovery keys are securely stored in a central management system.
- E
Implement encryption on all laptops without verifying hardware compatibility.
Show answer and explanation
Correct answers: A, B, D
Explanation
To successfully implement the security policy of full disk encryption, IT support must first ensure that all laptops are compatible, inform users of the policy, and securely manage recovery keys. These steps collectively ensure a smooth, secure rollout of the new policy while minimizing risks and ensuring compliance.
- A. Correct.
Correct. Verifying hardware compatibility ensures that the laptops can support full disk encryption without performance or compatibility issues.
- B. Correct.
Correct. Communicating the policy and providing clear instructions helps ensure that end-users understand their responsibilities and how to comply with the new requirements.
- C. Incorrect.
Incorrect. Encryption should be applied consistently across all laptops as per the policy, not just on a request basis.
- D. Correct.
Correct. Securely storing recovery keys ensures that encrypted data can be retrieved in case of accidental lockouts or hardware issues.
- E. Incorrect.
Incorrect. Implementing encryption without verifying compatibility can lead to technical issues or device failures.