As a cybersecurity analyst for SecureNet, you are performing a security assessment of a new mobile payment application. One of your primary concerns is the secure storage of customer data on the…

Question

Options

• AImplement biometric authentication for app access.
• BEncrypt all sensitive data stored on the device.
• CEnable GPS tracking for all devices using the app.
• DRegularly update the app to the latest version.

• A
  3% (2)
• B
  71% (44)
• C
  18% (11)
• D
  8% (5)

Explanation

Explanation

Encrypting all sensitive data stored on the device (Option B) directly addresses the core concern of secure data storage - if an attacker physically accesses or compromises the device, encrypted credit card details and PINs remain unreadable without the decryption key, rendering the stolen data useless. Option A (biometric authentication) controls access to the app but does nothing to protect data that has already been stored if the device is bypassed or rooted. Option C (GPS tracking) is a device management feature with no relevance to data confidentiality or storage security. Option D (regular updates) is good general hygiene and may patch vulnerabilities, but it does not directly secure data already stored on the device.

Memory Tip: Think "Data at Rest = Encrypt the Best." Whenever a question focuses on stored sensitive data, encryption is almost always the answer - it protects the data itself, regardless of how an attacker gains access to the device.

No community discussion yet for this question.