Mobile Device Management CEH Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An organization's MDM policy requires a 6-digit passcode and encryption on all devices. A user with a rooted Android device is unable to enroll because the device fails the compliance check. The user is a senior executive who needs immediate access to email. Which action should the administrator take to balance security and business need?

   • AAllow the device to enroll without any restrictions to avoid delaying the executive
   • BUninstall the root and then enroll the device
   • CIssue a temporary exception that allows the device to enroll but with restricted access to sensitive data, and schedule a replacement device
   • DRemotely wipe the device and force re-enrollment
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is deploying 500 corporate-owned Android devices to field staff. The security team requires that each device be automatically enrolled in the MDM before the user receives it, and that the device be locked to the corporate environment so users cannot remove the management profile. Which enrollment approach should the administrator configure?

   • AQR-code enrollment using a work profile on a personal device
   • BUser-initiated enrollment via a web link and a BYOD profile
   • CZero-touch enrollment with a device owner (fully managed) configuration
   • DManual enrollment with a shared device mode and no device owner
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An organization has a mix of corporate-owned and BYOD devices. They want to enforce a passcode policy on corporate-owned devices but not on BYOD devices. However, they still want to protect corporate data on BYOD devices. Which MDM/MAM configuration should they use?

   • AApply MDM policies to corporate-owned devices and MAM policies to BYOD devices
   • BUse MAM policies for all devices and skip MDM entirely
   • CUse MDM for all devices but exclude BYOD from passcode enforcement
   • DApply the same MDM passcode policy to all devices
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An MDM administrator is setting up a new MDM server and needs to ensure that devices can receive commands even when they are not actively connected to the corporate network. Which communication protocol should be used to push commands to devices?

   • AFile Transfer Protocol (FTP) to push configuration files
   • BApple Push Notification Service (APNs) for iOS and Firebase Cloud Messaging (FCM) for Android
   • CLightweight Directory Access Protocol (LDAP) to sync device attributes
   • DSimple Mail Transfer Protocol (SMTP) to send commands via email
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security auditor discovers that several MDM-managed Android devices have been rooted, and the MDM agent is no longer reporting compliance. The auditor suspects the users bypassed MDM controls. Which MDM feature should the administrator use to detect and respond to this situation?

   • AUse a remote lock to prevent further access but leave the device enrolled
   • BAsk users to unroot their devices and then re-enroll them
   • CDisable the MDM agent on those devices and reinstall it manually
   • DConfigure a compliance policy that flags rooted devices and triggers a conditional block or selective wipe
   Reveal Solution Discussion Select an answer first