QuestionQ277

Privacy Engineering

An organization intends to deploy a new cloud-based human resources (HR) solution with a mobile application interface. Which of the following is the BEST control for preventing data leakage?

  • A Data stored in the cloud-based solution is encrypted.
  • B Separate credentials are used for the mobile application.
  • C Download of data to the mobile devices is disabled.
  • D Single sign-on (SSO) is enabled for the mobile application.
Explanation

Disabling downloads to mobile devices directly prevents sensitive HR data from being copied from the cloud service onto endpoint storage, reducing exposure if a device is lost, compromised, or unmanaged. Encryption and authentication controls protect data or access but do not stop an authorized user from downloading data.

Community Discussion

No comments yet. Be the first to start the discussion!