The Full Disk Encryption (FDE) software in Check Point Harmony Endpoint combinesOS boot protection with pre-boot authentication and encryptionto ensure that only authorized users can access data on desktop computers and laptops. This is detailed in theCP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdfonpage 217, under "Check Point Full Disk Encryption," where it states:

"Combines Pre-boot protection, boot authentication, and strong encryption to make sure that only authorized users are given access to information stored on desktops and laptops."

This extract highlights three key elements:

Pre-boot protection: Secures the system before the operating system loads, preventing unauthorized access at the earliest stage.

Boot authentication: Requires users to authenticate (e.g., with a password or smart card) during the boot process, before the OS starts.

Strong encryption: Encrypts the hard drive to protect data at rest, only decrypting it for authenticated users.

Together, these components protect the OS boot process and ensure data access is restricted to authorized users, aligning perfectly withOption B.

Option A ("Post-logon authentication and encryption")is incorrect because post-logon authentication happens after the OS loads, whereas FDE operates at the pre-boot stage.

Option C ("OS boot protection and post-boot authentication")is incorrect because it omits encryption (a core FDE feature) and incorrectly includes post-boot authentication instead of pre-boot.

Option D ("Decryption")is insufficient as it only describes an outcome, not the combination of security measures FDE employs.