Question
A company has implemented a requirement to encrypt all the hard drives on its servers as part of a data loss prevention strategy. Which of the following should the company also perform as a data loss prevention method?
- A. Encrypt all network traffic
- B. Implement MFA on all the servers with encrypted data Correct
- C. Block the servers from using an encrypted USB
- D. Implement port security on the switches
Explanation
Disk encryption protects data only while the drives are offline or stolen. Once a server is running and a user signs in, the data is readable, so strong authentication such as MFA is needed to stop unauthorized people from reaching and taking that data. Encrypting network traffic protects data in transit but does not control who can access it, blocking encrypted USB drives would push users toward unencrypted ones, and switch port security limits which devices connect rather than who reaches the data.
