1. What are the advantages of performing encryption at the disk-block level, below the file system?

1.      What are the advantages of performing encryption at the disk-block level, below the file system? (Mark all that apply.)

A.     Avoiding file system overheads allows for higher performance

B.      Since the encryption system has to deal with a simpler interface, the design is simpler

C.      The same encryption system will work with different file systems

D.     Encrypting at the disk-block level ensures integrity, which cannot be achieved in the file system itself

2.      Why doesn't BitLocker encrypt the BitLocker boot partition (as opposed to the OS data partition)? (Mark all that apply.)

A.     Encryption would be too expensive this early in the boot process

B.      The TPM measures the contents of the BitLocker partition, so adversaries would not be able to tamper with its contents

C.      The BitLocker boot partition is not encrypted, but the keys stored on that partition are encrypted

D.     The boot partition contains no secret information that needs to be protected from disclosure