Eccouncil 312-50 Exam - Topic 10 Question 92 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 92
Topic #: 10

As a cybersecurity analyst for SecureNet, you are performing a security assessment of a new mobile payment application. One of your primary concerns is the secure storage of customer data on the device. The application

stores sensitive information such as credit card details and personal identification numbers (PINs) on the device. Which of the following measures would best ensure the security of this data?

AImplement biometric authentication for app access.

BEncrypt all sensitive data stored on the device.

CEnable GPS tracking for all devices using the app.

DRegularly update the app to the latest version.

Show Suggested Answer

Suggested Answer: B

Encrypting all sensitive data stored on the device is the best measure to ensure the security of this data, because it protects the data from unauthorized access or disclosure, even if the device is lost, stolen, or compromised. Encryption is a process of transforming data into an unreadable format using a secret key or algorithm. Only authorized parties who have the correct key or algorithm can decrypt and access the data. Encryption can be applied to data at rest, such as files or databases, or data in transit, such as network traffic or messages. Encryption can prevent attackers from stealing or tampering with the customer data stored on the device, such as credit card details and PINs, which can cause financial or identity fraud.

The other options are not as effective or sufficient as encryption for securing the customer data stored on the device. Implementing biometric authentication for app access may provide an additional layer of security, but it does not protect the data from being accessed by other means, such as malware, physical access, or backup extraction. Enabling GPS tracking for all devices using the app may help locate the device in case of loss or theft, but it does not prevent the data from being accessed by unauthorized parties, and it may also pose privacy risks. Regularly updating the app to the latest version may help fix bugs or vulnerabilities, but it does not guarantee the security of the data, especially if the app does not use encryption or other security features. Reference:

Securely Storing Data | Security.org

Data Storage Security: 5 Best Practices to Secure Your Data

M9: Insecure Data Storage | OWASP Foundation

by Krissy at Sep 16, 2024, 06:19 PM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rodney

3 months ago

I’m surprised they’d store PINs on the device at all!

upvoted 0 times

...

Cherry

3 months ago

Regular updates (D) are important too, but not the top priority here.

upvoted 0 times

...

Letha

3 months ago

A is good, but it shouldn't be the only measure.

upvoted 0 times

...

Theresia

4 months ago

Wait, GPS tracking? How does that help with security?

upvoted 0 times

...

Hector

4 months ago

Definitely B, encryption is a must for sensitive data!

upvoted 0 times

...

German

4 months ago

GPS tracking seems a bit off for securing data, but I guess keeping the app updated is important too. D might help with vulnerabilities, but I still lean towards B for data protection.

upvoted 0 times

...

Brandon

4 months ago

I think we had a practice question about app security, and encrypting data was definitely emphasized. B seems like the most logical answer here.

upvoted 0 times

...

Tish

4 months ago

I'm not entirely sure, but I feel like biometric authentication could add an extra layer of security. Maybe A is also a good option?

upvoted 0 times

...

Argelia

5 months ago

I remember discussing the importance of data encryption in class, so I think option B might be the best choice for securing sensitive information.

upvoted 0 times

...

Moon

5 months ago

Encrypting all the data stored on the device is crucial. That's the most comprehensive way to ensure the security of the customer's personal and financial details.

upvoted 0 times

...

Barb

5 months ago

Implementing biometric authentication is a great way to secure access to the app and the sensitive information it contains. That's the option I'd go with.

upvoted 0 times

...

Filiberto

5 months ago

Hmm, I'm a bit unsure about this one. There are a few options, but I need to think carefully about which one would best protect the customer data.

upvoted 0 times

...

Yvonne

5 months ago

This seems like a straightforward security question. I'd focus on the key requirement of securing the sensitive data stored on the device.

upvoted 0 times

...

Ora

1 year ago

Regular updates are important, but they won't do much good if the data is just sitting there unprotected. Encryption is the winner here, hands down.

upvoted 0 times

...

Dudley

1 year ago

Haha, GPS tracking? What is this, a spy movie? Encrypt the data, folks! Keeps the bad guys out and the good guys safe.

upvoted 0 times

Kimberlie

1 year ago

Haha, GPS tracking? What is this, a spy movie? Encrypt the data, folks! Keeps the bad guys out and the good guys safe.

upvoted 0 times

...

Madelyn

1 year ago

B) Encrypt all sensitive data stored on the device.

upvoted 0 times

...

Vinnie

1 year ago

A) Implement biometric authentication for app access.

upvoted 0 times

...

Dylan

1 year ago

I also believe that option B is the most secure choice. It's crucial to keep customer data safe.

upvoted 0 times

...

Nicholle

1 year ago

I agree with German. Encrypting the data will protect it from unauthorized access.

upvoted 0 times

...

Catherin

1 year ago

Biometric authentication is great, but it doesn't protect the data if it's stored in plain text. Encryption is the way to go, no doubt about it.

upvoted 0 times

Andrew

1 year ago

Definitely, encryption is the best way to secure the data.

upvoted 0 times

...

Lindsey

1 year ago

Encrypt all sensitive data stored on the device.

upvoted 0 times

...

Teddy

1 year ago

Biometric authentication is great, but it doesn't protect the data if it's stored in plain text.

upvoted 0 times

...

German

1 year ago

I think option B) Encrypt all sensitive data stored on the device would be the best measure.

upvoted 0 times

...

Val

1 year ago

Definitely option B. Encryption is the way to go for securing sensitive data on the device. The other options don't really address the core issue here.

upvoted 0 times