The helpdesk department desires to roll out a remote support application for internal use on all company computers. This tool should allow remote desktop sharing, system log gathering, chat…

MITM protection is important but is substantially addressed by strong encryption of remote desktop and file transfer traffic, which is covered more directly by option E.

The described tool can access remote desktops, system logs, hardware inventory, and the registry, representing extremely broad privileged access across the entire organization. Built-in accountability features such as session recording, action logging, and user attribution are the most critical control because they enable detection and investigation of misuse, insider threats, or unauthorized actions. Without accountability, there is no forensic trail for any of the powerful operations the tool can perform.

Encrypting the tracking database protects stored inventory data at rest, but this is a lower-risk concern compared to ensuring that every privileged remote session action is logged and attributable to an individual.

Snapshot and undo features address accidental configuration changes but provide no security accountability and do not prevent or detect malicious use of the tool's privileged capabilities.

Encryption of remote desktop and file transfer protects data in transit and is a baseline technical requirement, but it does not address who did what during a session, making it less critical than accountability for a high-privilege internal tool.