Disk encryption on laptops primarily protects data when which scenario occurs?

• A. The data is encrypted at rest only
• B. When the device is updated
• C. When the user logs in
• D. The device is lost or stolen

Answer: (D)

Disk encryption secures data at rest by turning the drive’s contents into unreadable ciphertext unless the decryption key is available. This protection is most impactful when the device is out of your possession—lost or stolen—because the attacker cannot access files without the correct password or key. If the laptop is merely updated or the user is logged in, decrypted data may be accessible to someone with the device or credentials, so those scenarios don’t demonstrate the primary safeguard as effectively. In short, disk encryption shields your information when the device is lost or stolen, preventing access to the stored data without proper authentication.