nerdexam
ExamsCAS-003Questions#910
CompTIA

CAS-003 · Question #910

CAS-003 Question #910: Real Exam Question with Answer & Explanation

The correct answer is B: Internal application store. The scenario has two distinct requirements: (1) the application must not be distributed over the public internet, and (2) communication between the app and system must be encrypted and mutually authenticated. B (Internal application store) satisfies the distribution requirement -

Question

A company recently developed a new mobile application that will be used to access a sensitive system. The application and the system have the following requirements: - The application contains sensitive encryption material and should not be accessible over the network - The system should not be exposed to the Internet - Communication must be encrypted and authenticated by both the server and the client Which of the following can be used to install the application on the mobile device? (Select TWO).

Options

  • ATPM
  • BInternal application store
  • CHTTPS
  • DUSB OTG
  • ESideloading
  • FOTA

Explanation

The scenario has two distinct requirements: (1) the application must not be distributed over the public internet, and (2) communication between the app and system must be encrypted and mutually authenticated. B (Internal application store) satisfies the distribution requirement - an enterprise MDM/internal app store operates entirely within the private corporate network, never exposing the application or backend system to the internet. C (HTTPS) satisfies the communication requirement - it provides TLS encryption and supports mutual certificate-based authentication (mTLS) between the client app and server. Together they address all three bullet points. Why the others fail: A (TPM) is a hardware key-storage chip, not an installation method. D (USB OTG) is a viable offline method but provides no encrypted/authenticated channel to the backend system. E (Sideloading) bypasses security controls entirely, which is inappropriate for an app carrying sensitive encryption material. F (OTA) requires network/internet connectivity, violating the 'not exposed to the internet' constraint.

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice