A company allows BYOD for accessing corporate email and documents. The security team wants to prevent employees from installing malicious apps on their personal devices, but employees want to use their devices for personal apps as well. Which approach best balances security and usability?

Require employees to use only company-provided devices that are locked down with an app whitelist.

Allow employees to install any app but require them to sign a security acknowledgment form.

Block all app installations on BYOD devices and only allow pre-installed apps.

Use an MDM that creates a separate work profile and only allows approved apps to run within that profile, while leaving the personal side unrestricted.

What is a common strategy for managing BYOD devices to enforce security policies?

Disabling all network access for personal devices

Requiring users to install a mobile device management (MDM) profile

Providing a separate device for every employee

Allowing users to opt out of security controls

A company is implementing a BYOD policy that must balance employee privacy with the need to protect corporate data. The policy requires that the company can remotely wipe corporate data from a lost device, but employees are concerned about the company wiping personal data. Which approach best addresses both concerns?

Perform a full device wipe remotely whenever a device is lost, regardless of the data stored on it.

Use an MDM solution that supports containerization, separating corporate data from personal data, and enable selective wipe that removes only the corporate container.

Require employees to sign a waiver allowing the company to wipe the entire device if needed.

Do not allow BYOD; provide company-owned devices with full-disk encryption and remote wipe capability.

Why is it important to control app installation on BYOD devices?

To reduce the cost of app licenses

To prevent the installation of malicious or non-compliant apps

To increase the number of apps available to users

A law firm allows attorneys to use personal laptops to access client files. The firm's policy requires that all client data be encrypted on these devices. The firm also needs to be able to remotely wipe the device if it is lost. Which solution should the firm implement?

Enroll the laptops in an MDM solution that enforces full-disk encryption and supports remote wipe.

Use a file-level encryption tool that encrypts only client files.

Ask attorneys to sign a waiver that releases the firm from liability if the device is lost.

Require attorneys to use a USB drive that is encrypted and store all client files on it.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 3

Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 5)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 21–25

21expert · hard
A company allows BYOD for accessing corporate email and documents. The security team wants to prevent employees from installing malicious apps on their personal devices, but employees want to use their devices for personal apps as well. Which approach best balances security and usability?
Select an answer first
22foundation · easy
What is a common strategy for managing BYOD devices to enforce security policies?
Select an answer first
23expert · hard
A company is implementing a BYOD policy that must balance employee privacy with the need to protect corporate data. The policy requires that the company can remotely wipe corporate data from a lost device, but employees are concerned about the company wiping personal data. Which approach best addresses both concerns?
Select an answer first
24foundation · easy
Why is it important to control app installation on BYOD devices?
Select an answer first
25expert · medium
A law firm allows attorneys to use personal laptops to access client files. The firm's policy requires that all client data be encrypted on these devices. The firm also needs to be able to remotely wipe the device if it is lost. Which solution should the firm implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.