Information Technology Specialist (ITS) Cybersecurity Practice Exam

Which built-in MacOS tool is designed for file encryption?

1. FileVault

2. BitLocker

3. Disk Utility

4. Secure Enclave

The correct answer is: FileVault

FileVault is the built-in macOS tool specifically designed for full disk encryption. It functions by encrypting the entire startup disk of a Mac, protecting the operating system and all user data stored on the disk. When FileVault is enabled, it uses XTS-AES-128 encryption with a 256-bit key to secure the contents of the disk. This ensures that even if someone gains physical access to the Mac, they cannot access the data without the correct user credentials. FileVault also integrates seamlessly with the macOS operating system, allowing users to log in using their existing credentials and providing recovery options through their Apple ID or a recovery key. This level of integration and security makes FileVault a primary choice for individuals and organizations looking to safeguard their sensitive data. Other options, while they may relate to security and encryption in some aspect, do not specifically offer full disk encryption tailored for macOS like FileVault does. Disk Utility can encrypt specific files or disk images but is not primarily focused on full disk encryption. BitLocker is a Windows-based encryption tool and does not apply to macOS systems. The Secure Enclave is a hardware-based security feature that enhances the protection of sensitive information but is not a tool for file encryption in the same way that