CA1-005: CompTIA SecurityXDemo

By CompTIA · Question Mode

QuestionQ78

Security Engineering

A security engineer needs to integrate device attestation into mobile-device user authentication and authorization workflows. Which of the following best fulfills the requirements?

  • A Enforcing a security boundary for all devices outside the perimeter network
  • B Enabling multifactor authentication using biometrics on access attempts
  • C Implementing single sign-on to centralize access control enforcement
  • D Configuring device profiling for patch level and jailbreak status
Explanation

Device profiling can evaluate device security posture, including whether the device is sufficiently patched and whether it appears jailbroken or otherwise compromised. These integrity and configuration signals can be used in authentication and authorization decisions. Managed device attestation supports validating device security posture and minimum software-version requirements; Android integrity verdicts can also indicate device compromise and recent security-update status.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!