Which of the following controls would BEST address the DPO’s concerns?

Developers are working on anew feature to add to a social media platform. Thew new feature involves users uploading pictures of what they are currently doing.
The data privacy officer (DPO) is concerned about various types of abuse that might occur due to this new feature. The DPO state the new feature cannot be released without addressing the physical safety concerns of the platform’s users. Which of the following controls would BEST address the DPO’s concerns?
A. Increasing blocking options available to the uploader
B. Adding a one-hour delay of all uploaded photos
C. Removing all metadata in the uploaded photo file
D. Not displaying to the public who uploaded the photo
E. Forcing TLS for all connections on the platform

How to PASS CAS-004 in First Attempt?

FULL Printable PDF and Software. VALID exam to help you PASS.

comptia-exams

15 thoughts on “Which of the following controls would BEST address the DPO’s concerns?

  1. As a professional steganologist, I can say without a doubt the answer is C. Removing all metadata from an image would produce an image without any physical reference to where the photo was taken or any other data that might lead to where the user of the photo is.

  2. I would stick with C on this one. The question is talking about the physical safety concerns of users when they upload photos. Images can contain a lot of metadata including the location (longitude/latitude) of where the picture was taken.

  3. how would adding a one-hour delay help?

    removing meta data will remove any information about where the pics were taken, hence addressing the physical safety concerns…

    1. Wow I completely missed that one, removing metadata would have camera/phone make and model, the time and date the photo was taken, and even GPS coordinates. This would 100% address physical safety concerns better then my choice.

      Maybe my brain is officially fried, Thanks Anon.

      1. no worries,

        these questions are a bit annoying sometimes, you have to pay attention to every aspect and then look for the answer that best fits, that’s the CompTia way,

        let me know if you need any more help,

  4. TLS is privacy and data integrity between two communicating applications. I guess when I read the question with the DPO wanting the physical safety concerns of the platform users addressed first, Adding a one-hour delay just makes more sense to me. Who really knows with these tests, I find myself still struggling with it.

    1. Forcing TLS for all connections on the platform.

      it will become very easy for them to know that the user is uploading the file using a secure network and is not a concern to the platform. It will also ensure that the user is accessing the platform from a particularly verified location also making the platform safer and privacy oriented.

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.