An Organization, Which Handles Large Volumes of PII, Allows Mobile

question 260

Multiple Choice

An organization, which handles large volumes of PII, allows mobile devices that can process, store, and transmit PII and other sensitive data to be issued to employees. Security assessors can demonstrate recovery and decryption of remnant sensitive data from device storage after MDM issues a successful wipe command. Assuming availability of the controls, which of the following would BEST protect against the loss of sensitive data in the future?

• A) Implement a container that wraps PII data and stores keying material directly in the container's encrypted application space.
• B) Use encryption keys for sensitive data stored in an eFuse-backed memory space that is blown during remote wipe.
• C) Issue devices that employ a stronger algorithm for the authentication of sensitive data stored on them.
• D) Procure devices that remove the bootloader binaries upon receipt of an MDM-issued remote wipe command.

---

Definitions:

Outgoing Personalities

Individuals characterized by their sociability, friendliness, and a preference for being in the company of others.

Middle-aged Black Women

Women of African descent, typically between the ages of 40 and 65, representing a specific demographic group with unique culture and experiences.

Middle-aged White Women

A demographic subgroup referring to women, typically considered to be between the ages of 45 and 65, of European descent.

Middle-aged Black Men

A demographic group defined by age, race, and gender, often studied in medical and sociological research for specific health outcomes and social experiences.