CAS-003 · Question #740
A company runs a well -attended, on-premises fitness club for its employees, about 200 of them each day. Employees want to sync center's login and attendance program with their smartphones. Human…
The correct answer is A. Use biometric authentication. The core privacy concern is that sensitive personal health and attendance data will be synced to employees' personal smartphones, where it could be accessed by unauthorized parties. Biometric authentication ties access to the individual's unique biological traits (fingerprint…
Question
A company runs a well -attended, on-premises fitness club for its employees, about 200 of them each day. Employees want to sync center's login and attendance program with their smartphones. Human resources, which manages the contract for the fitness center, has asked the security architecture to help draft security and privacy requirements. Which of the following would BEST address these privacy concerns?
Options
- AUse biometric authentication.
- BUtilize geolocation/geofencing.
- CBlock unauthorized domain bridging.
- DImplement containerization
How the community answered
(14 responses)- A86% (12)
- B7% (1)
- D7% (1)
Explanation
The core privacy concern is that sensitive personal health and attendance data will be synced to employees' personal smartphones, where it could be accessed by unauthorized parties. Biometric authentication ties access to the individual's unique biological traits (fingerprint, face), ensuring only the legitimate employee can view their own attendance and fitness records on their device. Geolocation/geofencing (B) verifies physical location but does not protect data once on the device. Blocking unauthorized domain bridging (C) prevents cross-domain data leakage at a network level but does not protect data already on the phone. Containerization (D) isolates work data from personal apps but does not restrict who can access the container itself.
Topics
Community Discussion
No community discussion yet for this question.