A Company Wants to Secure a Newly Developed Application That

question 362

Multiple Choice

A company wants to secure a newly developed application that is used to access sensitive information and data from corporate resources. The application was developed by a third-party organization, and it is now being used heavily, despite lacking the following controls: Certificate pinning Tokenization Biometric authentication The company has already implemented the following controls: Full device encryption Screen lock Device password Remote wipe The company wants to defend against interception of data attacks. Which of the following compensating controls should the company implement NEXT?

• A) Enforce the use of a VPN when using the newly developed application
• B) Implement a geofencing solution that disables the application according to company requirements
• C) Implement an out-of-band second factor to authenticate authorized users
• D) Install the application in a secure container requiring additional authentication controls

---

Definitions:

Output Level

The total quantity of goods or services produced in a given period of time.

Sole Producer

A market situation in which only one company or entity provides a particular product or service, often leading to a monopoly.

Marginal Cost

The investment needed to manufacture an additional unit of a product or service.

Demand Schedule

A table that lists the quantity of a good that consumers are willing to purchase at various prices.