thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Full Disk Encryption (FDE)

Encrypting an entire storage device, including the OS and free space, so data is unreadable without authentication.

Definition

FDE protects data at rest on lost or stolen devices. Software implementations include BitLocker, FileVault 2, and LUKS; hardware implementations use self-encrypting drives. Data is decrypted transparently once the user or TPM unlocks the volume, so FDE does not protect a running, logged-in system.

Example

A stolen laptop with BitLocker and TPM+PIN cannot be read when removed and attached to another computer.

Exam tip

FDE protects powered-off devices; once unlocked, malware can read files normally.

Related terms