CompTIA CASP+ (CAS-003) — Question 8

A systems security engineer is assisting an organization's market survey team in reviewing requirements for an upcoming acquisition of mobile devices. The engineer expresses concerns to the survey team about a particular class of devices that uses a separate SoC for baseband radio I/O. For which of the following reasons is the engineer concerned?

Answer options

• A. These devices can communicate over networks older than HSPA+ and LTE standards, exposing device communications to poor encryptions routines
• B. The organization will be unable to restrict the use of NFC, electromagnetic induction, and Bluetooth technologies
• C. The associated firmware is more likely to remain out of date and potentially vulnerable
• D. The manufacturers of the baseband radios are unable to enforce mandatory access controls within their driver set

Correct answer: B

Explanation

The correct answer, B, indicates that the organization cannot restrict the use of various wireless technologies, which could lead to security risks. Option A is incorrect because it addresses network compatibility rather than control over technologies. Option C, while relevant to firmware updates, does not directly relate to the specific concern about technology restrictions. Option D discusses access controls, which is not the main focus of the engineer's concern.