A company allows employees to bring their own phones. The IT team needs to ensure that corporate email and documents are protected, but they do not want to manage the entire device or enforce passcode policies on personal apps. Which approach should they implement?

Ask users to manually encrypt their devices and use a third-party email app

Use a VPN profile that routes all traffic through the corporate network

Enroll all devices in full MDM and enforce a device passcode

Deploy a Mobile Application Management (MAM) policy with app-level conditional access

A company is rolling out new iPads to executives. The iPads are purchased directly from Apple and need to be enrolled in the corporate MDM automatically when first turned on. Which step is required to enable this?

Add the iPads to Apple Business Manager and assign them to the MDM server

Use Apple Configurator to manually install the MDM profile on each iPad

Create a configuration profile in the MDM and email it to the user

Send the user an email with a link to download the MDM agent

A security auditor is reviewing an MDM deployment and finds that the remote wipe feature is configured to perform a full device wipe on all devices, including BYOD. The auditor recommends changing this to a selective wipe. Which risk does the full wipe pose?

It may erase personal data on BYOD devices, leading to legal and privacy issues

It may fail on devices with certain operating systems

It may cause the device to become unenrolled from MDM

It may not remove corporate data effectively

Which MDM-related vulnerability should a CEH professional look for when assessing an enterprise's mobile device security posture?

Devices that are not enrolled in MDM but can access corporate email

Devices that are enrolled in MDM and have a strong passcode

Devices that have a long battery life

Devices that are using the latest operating system version

A company is deploying an MDM solution and needs to ensure that devices can be managed even when they are outside the corporate network. They also need to support both iOS and Android devices. Which architecture should they choose?

A hybrid MDM that uses SMS for policy updates

A cloud-based MDM platform that uses HTTPS and platform push services

A peer-to-peer MDM where devices sync with each other

An on-premises MDM server that is only accessible via VPN

EC-CouncilCertified Ethical Hacker

Domain 7Objective 3

Mobile Device Management CEH Practice Questions (Page 1)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 1–5

1application · medium
A company allows employees to bring their own phones. The IT team needs to ensure that corporate email and documents are protected, but they do not want to manage the entire device or enforce passcode policies on personal apps. Which approach should they implement?
Select an answer first
2application · medium
A company is rolling out new iPads to executives. The iPads are purchased directly from Apple and need to be enrolled in the corporate MDM automatically when first turned on. Which step is required to enable this?
Select an answer first
3expert · hard
A security auditor is reviewing an MDM deployment and finds that the remote wipe feature is configured to perform a full device wipe on all devices, including BYOD. The auditor recommends changing this to a selective wipe. Which risk does the full wipe pose?
Select an answer first
4foundation · easy
Which MDM-related vulnerability should a CEH professional look for when assessing an enterprise's mobile device security posture?
Select an answer first
5expert · hard
A company is deploying an MDM solution and needs to ensure that devices can be managed even when they are outside the corporate network. They also need to support both iOS and Android devices. Which architecture should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.