CompTIA A+ Core 2 (220-1202)Operating SystemsMedium

A user needs to encrypt an entire external hard drive on their Windows 10 Pro workstation to protect sensitive data. Which built-in Windows feature should the technician recommend for this purpose?

  1. AStorage Spaces
  2. BWindows Defender Firewall
  3. CBitLocker
  4. DEncrypting File System (EFS)
Show answer & explanation

Correct answer: C. BitLocker

BitLocker is the full-disk encryption feature included in Windows Pro and Enterprise editions. It allows users to encrypt entire volumes, including external drives, providing strong data protection.

Why the other options are wrong

  • A. Storage Spaces is a virtualization technology that allows combining multiple physical drives into a single logical unit, not an encryption feature.
  • B. Windows Defender Firewall controls network traffic and has no encryption capabilities for disks.
  • D. EFS encrypts individual files and folders, not entire volumes, and is less secure for whole-drive protection.

BitLocker Drive Encryption

A full-disk encryption feature available in Microsoft Windows Pro, Enterprise, and Education editions, designed to protect data by encrypting entire volumes.

  • Encrypts entire hard drives or removable drives.
  • Requires a Trusted Platform Module (TPM) for seamless boot protection, but can be used without TPM via USB startup key or password.
  • Provides protection against unauthorized data access if a device is lost or stolen.

Memory trick: BitLocker is the 'BIG LOCK' for your whole disk!

More Operating Systems questions