Alpha Finance, a leading banking institution, is launching anew mobile banking app. Given the sensitive financial data involved, it wants to ensure that Its application follows the best security…

Question

Options

• AEmbedding an antivirus within the app
• BEmploying multi-factor authentication (MFA) for user logins
• CProviding an in-app VPN for secure transactions
• DEncouraging users to update to the latest version of their OS

• A
  4% (2)
• B
  77% (36)
• C
  6% (3)
• D
  13% (6)

Explanation

Explanation

Multi-factor authentication (MFA) is the primary security recommendation for a mobile banking app because it directly protects user accounts by requiring two or more verification factors (e.g., password + OTP), significantly reducing the risk of unauthorized access even if credentials are compromised - making it a foundational, industry-standard security control for financial applications.

Why the distractors are wrong:

• A (Antivirus): Embedding antivirus in an app is not a standard practice; antivirus is a device-level solution, not an application-level control, and adds unnecessary complexity.
• C (In-app VPN): While VPNs encrypt traffic, they are not a primary app-level security control; secure HTTPS/TLS protocols already handle transmission security for banking apps.
• D (OS updates): Encouraging OS updates is a good general hygiene tip but is outside the app's direct control and does not constitute an application security best practice.

Memory Tip: Think "MFA = Multiple Layers of Protection" - just like a bank vault has multiple locks, MFA adds multiple verification steps. Whenever an exam question asks about authentication security for sensitive data, MFA is almost always the highest-priority answer. If the question involves protecting login access, think MFA first!

No community discussion yet for this question.