An organization is deploying MDM for 500 corporate-owned smartphones. The administrator wants to ensure that devices can be automatically enrolled when first powered on, without requiring users to manually install an agent. Which MDM component and protocol combination should be used?

Manual agent installation from the app store with a configuration profile

QR code enrollment with the device agent using HTTPS

User-initiated enrollment via a web portal using SMS verification

Apple Business Manager (ABM) with Automated Device Enrollment and Apple Push Notification Service (APNs)

A company is implementing a BYOD program. They need to protect corporate data in apps like email and documents, but they also want to avoid managing personal apps and data. They are considering either full MDM enrollment or MAM. Which approach best meets the requirement?

Use a VPN and require users to manually encrypt their devices

Enroll devices in MDM and use a work profile to separate personal and corporate data

Use a container app that isolates all corporate data

Use MAM with app protection policies and conditional access, without full device enrollment

A security auditor is reviewing an MDM deployment and finds that some devices are reporting as 'compliant' even though they have been jailbroken. The MDM agent is running, but the auditor suspects the agent's integrity is compromised. Which of the following is the most effective control to detect this type of bypass?

Increase the frequency of MDM policy check-ins

Block all devices that are not on the corporate Wi-Fi network

Implement certificate pinning and integrity attestation for the MDM agent

A small business wants to manage a mix of iOS and Android devices used by employees, but it lacks IT staff to maintain a dedicated server. The business needs to enforce passcode policies, deploy a corporate Wi-Fi profile, and remotely wipe lost devices. Which deployment model best fits these needs?

On-premises MDM server installed on a local Windows server

Cloud-based MDM service (SaaS) that supports both iOS and Android

Use Apple Configurator and Android Enterprise manually

Mobile Application Management (MAM) only, without MDM

A company is deploying MDM to 1000 Android devices. The administrator wants to ensure that devices are enrolled with minimal user interaction and that the MDM agent is pre-installed on the devices. Which enrollment method should be used?

Zero-touch enrollment via Android Enterprise (formerly Android Zero-Touch)

Manual agent installation from the Play Store

Email-based enrollment with a link to download the agent

EC-CouncilCertified Ethical Hacker

Domain 7Objective 3

Mobile Device Management CEH Practice Questions (Page 4)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 16–20

16application · medium
An organization is deploying MDM for 500 corporate-owned smartphones. The administrator wants to ensure that devices can be automatically enrolled when first powered on, without requiring users to manually install an agent. Which MDM component and protocol combination should be used?
Select an answer first
17expert · hard
A company is implementing a BYOD program. They need to protect corporate data in apps like email and documents, but they also want to avoid managing personal apps and data. They are considering either full MDM enrollment or MAM. Which approach best meets the requirement?
Select an answer first
18expert · hard
A security auditor is reviewing an MDM deployment and finds that some devices are reporting as 'compliant' even though they have been jailbroken. The MDM agent is running, but the auditor suspects the agent's integrity is compromised. Which of the following is the most effective control to detect this type of bypass?
Select an answer first
19application · medium
A small business wants to manage a mix of iOS and Android devices used by employees, but it lacks IT staff to maintain a dedicated server. The business needs to enforce passcode policies, deploy a corporate Wi-Fi profile, and remotely wipe lost devices. Which deployment model best fits these needs?
Select an answer first
20application · medium
A company is deploying MDM to 1000 Android devices. The administrator wants to ensure that devices are enrolled with minimal user interaction and that the MDM agent is pre-installed on the devices. Which enrollment method should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.