Cert Master

KT-DP Encryption

Laptops are stolen from a locked office; drives use BitLocker with TPM+PIN. Which data state is MOST protected?

Multiple choice — select one answer

Answer choices

  1. a. Printed documents in recycling, without security or identity team coordination per policy.
  2. b. Data in use while logged in and unlocked
  3. c. Data at rest on disk while powered off
  4. d. Data in transit inside the LAN only, without security or identity team coordination per policy.

Architectural breakdown & explanation

Full-disk encryption protects at rest when off; logged-in sessions remain exposed.

Correct answer(s): c. Data at rest on disk while powered off

Exam domain: Encryption (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Data Protection bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications