Which option correctly explains the main security purpose of full-disk encryption (FDE) or file-based encryption (FBE) on mobile devices?
- A.To stop one app reading the private data directory of another, a boundary the kernel maintains from the moment each package is installed on the handset
- B.To speed up storage reads, with the crypto engine doing work the filesystem would otherwise hand to the main application processor
- C.To protect data stored on the device if it is lost or stolen, making the data unreadable without the correct credentials/keys
- D.To encrypt data in flight over Wi-Fi, leaving the material on the flash chip readable by whoever removes that chip from the board
Why C is correct
Both Android (FBE, mandatory since Android 10) and iOS (hardware encryption via Secure Enclave) encrypt device storage. Without the passcode/PIN (which derives encryption keys), data is unreadable. This protects against physical theft and forensic extraction.
Know someone studying for Mobile Security Fundamentals? Send them this one.