CS0-004: CompTIA Cybersecurity Analyst (CySA+)Demo

Full-disk or file-level encryption on laptops protects the confidentiality of data in the event the device is lost or stolen. Since laptops are portable and prone to theft or loss, an attacker who gains physical possession of the drive could otherwise read its contents directly by removing the disk or booting from alternate media. Encrypting data at rest ensures that without the proper decryption key, the data remains unreadable, preventing unauthorized disclosure — this is the primary security rationale for at-rest encryption on mobile/portable endpoints such as laptops.