Mobile Device Security CCT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of a Mobile Device Management (MDM) solution?

   • ATo centrally enforce security policies and manage mobile devices across an organization
   • BTo provide a secure communication channel between two mobile devices
   • CTo replace the need for antivirus software on all endpoints
   • DTo develop mobile applications for the organization
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A law firm allows attorneys to use personal tablets for client work. The firm must ensure that client data is protected even if the device is compromised, and that the firm can remove its data without affecting the attorney's personal data. The attorneys resist full-device management. Which approach best balances security and user privacy?

   • AEnroll all personal tablets in full MDM and enforce device-wide encryption and remote wipe.
   • BUse a VPN and require attorneys to access client data only through a web portal.
   • CRequire attorneys to use a separate corporate-issued device for client work.
   • DDeploy a mobile application management (MAM) solution that wraps the firm's apps and enforces data-loss prevention policies within those apps.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company allows employees to use personal smartphones for work email. The security team must ensure that if a device is lost, the corporate data on it can be wiped remotely without affecting the employee's personal photos and apps. What should the security team implement?

   • AConfigure the email server to require a full device wipe before allowing email access.
   • BDeploy an MDM solution and enroll devices with a work profile that separates corporate and personal data.
   • CRequire employees to manually delete work email from their phones if the device is lost.
   • DAsk employees to sign a waiver stating they will not store corporate data on personal devices.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A developer is writing a mobile app that handles payment card data. The app must comply with PCI DSS requirements. Which secure coding practice is most important to implement?

   • AUse strong encryption for data at rest and in transit, and avoid storing sensitive data unless absolutely necessary.
   • BAllow the app to run in the background to speed up transactions.
   • CRequest all permissions at install to ensure the app functions correctly on all devices.
   • DUse a third-party analytics library to track user behavior and improve the app.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A law firm requires that all client files stored on mobile devices be encrypted. They also need to ensure that if a device is lost, the data cannot be accessed even if the device is physically compromised. Which configuration should they implement?

   • AUse file-level encryption only for individual client files.
   • BStore client files in a cloud service and delete them from the device.
   • CEnable full-disk encryption and enforce a strong lock screen password.
   • DRely on the device's default encryption settings.
   Reveal Solution Discussion Select an answer first