As a cybersecurity analyst for SecureNet, you are performing a security assessment of a new mobile payment application. One of your primary concerns is the secure storage of customer data on the…

Enabling GPS tracking is a privacy concern and does not secure data stored on the device from unauthorized access.

Regularly updating the app is good practice for general security and patching vulnerabilities, but it does not directly secure *data already stored* on the device from direct file system access.

Encrypting all sensitive data stored on the device ensures that even if an attacker gains unauthorized access to the device's storage, the credit card details and PINs remain unreadable and unusable without the decryption key. This directly addresses the concern of secure *storage* of customer data.

Implementing biometric authentication secures *access to the app*, but it does not protect the underlying data files if an attacker bypasses the app's authentication or accesses the device's file system directly.