Exam CISSP topic 1 question 293 discussion

The key term is "technical control"

C: They are asking about "Technical" controls

The key is "technical". It is asking for technical controls soi i go for C

C. Default the user to not share any information.......I went with C. instead of D. Inform the user of the sharing feature changes after implemented... because it is common klnowledge and a best practice to always inform users prior to implementing a change instead of after implementation especially when it has to deal with their data and privacy. C. Default the user to not share any information is a more reasonable answer to me.

Option C: Setting sharing to off by default gives users control over their data and ensures nothing is shared inadvertently. D option -Notifying users of the changes is also imperative for transparency and consent, is secondary.

D. Inform the user of the sharing feature changes after implemented. To remedy the privacy issue while still accomplishing the organization's business goals, it's essential to inform users of the changes and obtain their informed consent regarding what information will be shared from their wearable devices. Transparency and user consent are important principles in data privacy. Users should be given clear information about the data sharing and should have the option to opt in or opt out of sharing as per their preferences. This approach respects user privacy and allows them to make informed decisions about sharing their data.

Stop sharing until you implement policy

It is asking for technical controls soi i go for C out of C and D

The given answer is the best choice since it asks for What technical controls should be put in place, the only technical control here is "C"

The users are not informed in this scenario, so first the users have to be informed A. Organization cannot decide on behalf of user, can they ? B. Functionality has been developed C. Possibly right as well D. Possibly right as well

Let's have them not share info with eath other.