CAS-005 · Question #280
A security engineer must ensure that sensitive corporate information is not exposed if a company laptop is stolen. Which of the following actions best addresses this requirement?
The correct answer is A. Utilizing desktop as a service for all company data and multifactor authentication. Utilizing Desktop as a Service (DaaS) means that data and applications are hosted in the cloud rather than on the local device. In the event of a laptop theft, no sensitive data resides on the device, thereby preventing unauthorized access. Coupling DaaS with multifactor…
Question
A security engineer must ensure that sensitive corporate information is not exposed if a company laptop is stolen. Which of the following actions best addresses this requirement?
Options
- AUtilizing desktop as a service for all company data and multifactor authentication
- BUsing explicit allow lists of specific IP addresses and deploying single sign-on
- CDeploying mobile device management and requiring stronger passwords
- DUpdating security mobile reporting policies and monitoring data breaches
How the community answered
(55 responses)- A85% (47)
- B4% (2)
- C4% (2)
- D7% (4)
Explanation
Utilizing Desktop as a Service (DaaS) means that data and applications are hosted in the cloud rather than on the local device. In the event of a laptop theft, no sensitive data resides on the device, thereby preventing unauthorized access. Coupling DaaS with multifactor authentication (MFA) adds an additional layer of security, ensuring that only authorized users can access the cloud-hosted data and applications. This combination effectively mitigates the risk of data exposure due to device theft.
Community Discussion
No community discussion yet for this question.