CompTIA Advanced Security Practitioner - CASP(CAS-003)

Set · v2020-03-20

An organization, which handles large volumes of PII, allows mobile devices that can process, store, and transmit PII and other sensitive data to be issued to
employees. Security assessors can demonstrate recovery and decryption of remnant sensitive data from device storage after MDM issues a successful wipe
command. Assuming availability of the controls, which of the following would BEST protect against the loss of sensitive data in the future?

Select oneImplement a container that wraps PII data and stores keying material directly in the container’s encrypted application space.Use encryption keys for sensitive data stored in an eFuse-backed memory space that is blown during remote wipe.Issue devices that employ a stronger algorithm for the authentication of sensitive data stored on them.Procure devices that remove the bootloader binaries upon receipt of an MDM-issued remote wipe command.

Questions & review

CorrectIncorrectUnanswered

Question link

About this exam

CompTIA Advanced Security Practitioner - CASP certification validates advanced-level competency in risk management, enterprise security operations and architecture, research and collaboration, and integration of enterprise security.