CompTIA CASP+ (CAS-004) — Question 422

A mobile device hardware manufacturer receives the following requirements from a company that wants to produce and sell a new mobile platform:

• The platform should store biometric data.
• The platform should prevent unapproved firmware from being loaded.
• A tamper-resistant, hardware-based counter should track if unapproved firmware was loaded.

Which of the following should the hardware manufacturer implement? (Choose three.)

Answer options

• A. ASLR
• B. NX
• C. eFuse
• D. SED
• E. SELinux
• F. Secure boot
• G. Shell restriction
• H. Secure enclave

Correct answer: C, F, H

Explanation

The correct answers are C (eFuse), F (Secure boot), and H (Secure enclave) as they all contribute to securing the mobile platform against unauthorized firmware and protecting biometric data. ASLR (A) and NX (B) are more focused on software-level protections and do not specifically address the requirements stated, while SELinux (E) and other options do not directly fulfill the needs for hardware-based security and tracking.