220-1102 Question 663
Single answerInternalA technician is preparing a Windows 11 laptop for an employee in the accounting department. The company requires that accounting files stored on the laptop remain protected if the device is lost, but the user must still be able to sign in with their normal company credentials and work without manually encrypting individual files. Which internal Windows feature should the technician enable to BEST meet this requirement?
- A
BitLocker drive encryption
- B
EFS on the accounting folder only
- C
NTFS file compression
- D
System Restore
Show answer and explanation
Correct answer: A
Explanation
The best answer is BitLocker drive encryption because the scenario is about protecting data on a lost or stolen laptop while allowing normal day-to-day use. In A+ Core 2, internal Windows security features commonly include BitLocker, EFS, NTFS permissions, and other built-in tools. BitLocker is specifically designed for full-volume encryption and is the recommended choice when the organization wants broad protection of data at rest with minimal user intervention. EFS is a real Windows feature, but it is better suited for selectively encrypting specific files or folders and is easier to misconfigure in a way that leaves some data unprotected. Microsoft documentation describes BitLocker as a drive encryption feature intended to help protect data on devices, especially if a device is lost or stolen. This makes it the most practical and complete solution in this scenario.
- A. Correct.
Correct. BitLocker encrypts the entire drive, protecting data at rest if the laptop is lost or stolen. It works transparently for an authorized user after authentication and is the best fit when the goal is broad protection for company data without requiring the employee to manually choose files to encrypt.
- B. Incorrect.
Incorrect. Encrypting File System (EFS) can protect selected files or folders, but it is not the best answer here because the requirement is to protect accounting files on the laptop in a way that does not depend on users or technicians correctly identifying every folder that needs protection. EFS is more granular and can be useful in some scenarios, but full-disk encryption is the stronger and more comprehensive control for a lost device.
- C. Incorrect.
Incorrect. NTFS compression reduces disk space usage; it does not provide confidentiality or protection against unauthorized access. Someone might choose this because it is an NTFS feature applied to files and folders, but it has nothing to do with encryption.
- D. Incorrect.
Incorrect. System Restore helps recover system files and settings after certain problems, such as bad drivers or failed updates. It does not protect stored business data from exposure if the laptop is lost or stolen.