Full Disk Encryption (FDE) in Check Point Harmony Endpoint is designed to protectdata at reststored on theHard Driveof desktops and laptops. This is explicitly outlined in theCP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdfonpage 217, under the section "Check Point Full Disk Encryption," which states:
"Combines Pre-boot protection, boot authentication, and strong encryption to make sure that only authorized users are given access to information stored on desktops and laptops."
This indicates that FDE encrypts the entire hard drive, securing all data stored on it when the device is powered off or in a resting state. Further clarification comes frompage 220, under "Volume Encryption," where it discusses encrypting "volumes," referring to the hard drive partitions:
"Volume Encryption - Enable this option to encrypt specified volumes on the endpoint computer."
Since a hard drive is the primary local storage medium on endpoint devices,Option D ("Hard Drive")is the correct answer.
Option A ("RAM Drive")is incorrect because RAM (Random Access Memory) is volatile memory that does not store data at rest; it loses data when power is off, unlike a hard drive.
Option B ("SMB Share")andOption C ("NFS Share")are incorrect because these are network-based file shares (Server Message Block and Network File System, respectively), not local storage devices protected by FDE. FDE focuses on local hard drives, not network resources.
[References:, CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 217: "Check Point Full Disk Encryption" (describes protecting data stored on desktops and laptops)., CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 220: "Volume Encryption" (confirms encryption targets hard drive volumes)., ]
