A Company Wants to Secure a Newly Developed Application That

question 362

Multiple Choice

A company wants to secure a newly developed application that is used to access sensitive information and data from corporate resources. The application was developed by a third-party organization, and it is now being used heavily, despite lacking the following controls: Certificate pinning Tokenization Biometric authentication The company has already implemented the following controls: Full device encryption Screen lock Device password Remote wipe The company wants to defend against interception of data attacks. Which of the following compensating controls should the company implement NEXT?

• A) Enforce the use of a VPN when using the newly developed application
• B) Implement a geofencing solution that disables the application according to company requirements
• C) Implement an out-of-band second factor to authenticate authorized users
• D) Install the application in a secure container requiring additional authentication controls

---

Definitions:

Price Elasticity of Demand

A measure of how much the quantity demanded of a good responds to a change in its price; it quantifies the sensitivity of demand relative to price changes.

Percent Change

A mathematical calculation that describes the degree of change over time, expressed as a percentage.

Demand Curve

A graphical representation of the relationship between the price of a good and the quantity demanded for a given period.

Price Ceiling

a legally established maximum price for goods or services, aimed at keeping prices from rising to high levels.