CompTIA CASP+ (CAS-004) — Question 2

A shipping company that is trying to eliminate entire classes of threats is developing an SELinux policy to ensure its custom Android devices are used exclusively for package tracking.
After compiling and implementing the policy, in which of the following modes must the company ensure the devices are configured to run?

Answer options

• A. Protecting
• B. Permissive
• C. Enforcing
• D. Mandatory

Correct answer: C

Explanation

The correct answer is C, Enforcing, because this mode ensures that the SELinux policy is actively applied, preventing unauthorized actions. Options A (Protecting) and D (Mandatory) are not standard SELinux modes, while B (Permissive) allows violations, which does not meet the company's requirement to eliminate threats.