Which action best enhances security for a tablet used by staff to log events in a secure area?

Which action best enhances security for a tablet used by staff to log events in a secure area?

• A. Remove logging capability
• B. Install antivirus on the tablet
• C. Require passcode or biometric authentication to unlock the device
• D. Disable the device from network access

Answer: (C)

Requiring a passcode or biometric unlock is an effective access control for a tablet used in a secure area. By ensuring that only authorized staff can unlock the device, you prevent unauthorized users from accessing the logging app and any sensitive data stored on the tablet. This protection at the point of use helps maintain the integrity of the logs, keeps sensitive information from being exposed if the device is lost or stolen, and preserves accountability because actions are tied to a verified user. Removing logging capability would defeat the purpose of the device, as the system needs to record events. Installing antivirus is helpful for malware defense but doesn’t stop someone from unlocking the device and tampering with data. Disabling network access could limit data exfiltration, but it also hinders legitimate operations like syncing logs and receiving updates, making it impractical as the primary security control.

Requiring a passcode or biometric unlock is an effective access control for a tablet used in a secure area. By ensuring that only authorized staff can unlock the device, you prevent unauthorized users from accessing the logging app and any sensitive data stored on the tablet. This protection at the point of use helps maintain the integrity of the logs, keeps sensitive information from being exposed if the device is lost or stolen, and preserves accountability because actions are tied to a verified user.

Removing logging capability would defeat the purpose of the device, as the system needs to record events. Installing antivirus is helpful for malware defense but doesn’t stop someone from unlocking the device and tampering with data. Disabling network access could limit data exfiltration, but it also hinders legitimate operations like syncing logs and receiving updates, making it impractical as the primary security control.