nerdexam
ExamsCAS-003Questions#825
CompTIA

CAS-003 · Question #825

CAS-003 Question #825: Real Exam Question with Answer & Explanation

The correct answer is D: USB OTG. The requirements state the application must not be publicly accessible over the internet (ruling out public app stores) and the backend system must not be exposed to the internet. (D) USB OTG (On-The-Go) allows direct device-to-device or computer-to-device transfer via a physical

Question

A company recently developed a new mobile application that will be used to access a sensitive system. The application and the system have the following requirements: The application contains sensitive encryption material and should not be accessible over the network. The system should not be exposed to the Internet. Communication must be encrypted and authenticated by both the server and the client. Which of the following can be used to install the application on the mobile device? (Choose two.)

Options

  • ATPM
  • BInternet application store
  • CHTTPS
  • DUSB OTG
  • ESideloading
  • FOTA

Explanation

The requirements state the application must not be publicly accessible over the internet (ruling out public app stores) and the backend system must not be exposed to the internet. (D) USB OTG (On-The-Go) allows direct device-to-device or computer-to-device transfer via a physical USB connection, with no network exposure whatsoever - the application binary never traverses a public or untrusted network, satisfying the 'not accessible over the network' requirement. (F) OTA (Over The Air) delivery via a private, corporate MDM infrastructure - not the public internet - allows controlled, authenticated deployment of the APK to managed devices without listing it in a public app store. The internet application store (B) would publicly expose the app. Sideloading (E), while viable offline, is not a controlled enterprise deployment mechanism and could bypass security controls. HTTPS (C) is a transport protocol, not a deployment method. TPM (A) is a hardware security module, not a distribution mechanism.

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice