Which type of encryption protects the entire disk rather than individual files?

• A. File level encryption
• B. Disk level encryption
• C. Email encryption
• D. Mobile application encryption

Answer: (B)

Disk-level encryption, or full-disk encryption, protects everything stored on the drive by encrypting data at rest. It secures the entire partition or disk, including system files, swap space, and all user data, with a single authentication step at boot to unlock the drive. This means that if the device is lost or stolen, an attacker cannot read any data without the decryption key.

File-level encryption, by contrast, encrypts only specific files or folders, leaving other data on the disk unencrypted and often requiring multiple keys and more management. Email encryption and mobile application encryption are focused on protecting messages or app data, not the entire disk.