Data entry functions for a web-based application have been outsourced to a third-party service provider who will work from a remote site. Which of the following issues would be of GREATEST concern…

Question

Options

• AServer-based malware protection is not enforced
• BThe business process has only one level of error checking.
• CThe application does not use a secure communications protocol.
• DThe application is configured with restrictive access controls.

• A
  6% (2)
• B
  9% (3)
• C
  67% (22)
• D
  18% (6)

Explanation

When a third party accesses a web application remotely over the internet, data traverses untrusted networks - without a secure communications protocol (e.g., TLS/HTTPS), all transmitted data is exposed in plaintext to interception and man-in-the-middle attacks, directly compromising confidentiality and integrity of the data being entered. Option A (malware protection) is a valid concern but is secondary - it affects the server environment, not the data in transit across an untrusted network. Option B (single-level error checking) is a data quality and process concern, not a primary security risk. Option D is actually desirable - restrictive access controls are a security best practice, not a problem; this is a classic distractor designed to catch test-takers who confuse "restrictive" with "broken."

Memory tip: Remote + third party = data crossing untrusted networks. When data leaves your environment, the channel securing it is your last line of defense - always ask "is it encrypted in transit?" first.

No community discussion yet for this question.