Which of the following is a core function provided by Mobile Device Management (MDM) solutions?

Remote wipe of a lost or stolen device to protect corporate data

Real-time GPS tracking of employees' personal vehicles

Blocking all internet access on managed devices

Automatic installation of all personal apps on employee devices

A penetration tester is assessing an organization's MDM. The tester finds that the MDM agent on a device can be uninstalled by the user, and after uninstallation, the device no longer receives policies. Which MDM control should be implemented to prevent this?

Make the MDM agent a device administrator or use Android Enterprise device owner mode to prevent uninstallation

Use a VPN to protect the agent's communication

Enforce a policy that requires the agent to check in every 5 minutes

A hospital issues iPads to nurses for accessing patient records. The compliance team requires that if a device is lost, all hospital data be erased remotely. However, nurses often store personal photos on the same device. Which MDM policy configuration best meets the requirement while minimizing impact on personal data?

Enable a full device wipe that resets the device to factory settings

Configure a selective wipe that removes only the managed app data and profiles

Disable the MDM agent and rely on the device's built-in finder service

Use a remote lock that prevents access but does not erase data

An MDM administrator is troubleshooting why a newly enrolled device is not receiving policies. The device shows as 'enrolled' in the console, but the agent reports 'pending'. Which component is most likely causing the delay?

The user has not accepted the terms of service

The device agent has not yet checked in with the MDM server to receive the policy

The device's certificate is invalid

How does MDM provision security certificates to managed devices?

By pushing the certificate through the MDM channel after enrollment

By sending the certificate via email to the user

By requiring the user to manually download the certificate from a website

By embedding the certificate in the device's firmware

EC-CouncilCertified Ethical Hacker

Domain 7Objective 3

Mobile Device Management CEH Practice Questions (Page 8)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 36–40

36foundation · easy
Which of the following is a core function provided by Mobile Device Management (MDM) solutions?
Select an answer first
37expert · hard
A penetration tester is assessing an organization's MDM. The tester finds that the MDM agent on a device can be uninstalled by the user, and after uninstallation, the device no longer receives policies. Which MDM control should be implemented to prevent this?
Select an answer first
38application · medium
A hospital issues iPads to nurses for accessing patient records. The compliance team requires that if a device is lost, all hospital data be erased remotely. However, nurses often store personal photos on the same device. Which MDM policy configuration best meets the requirement while minimizing impact on personal data?
Select an answer first
39application · medium
An MDM administrator is troubleshooting why a newly enrolled device is not receiving policies. The device shows as 'enrolled' in the console, but the agent reports 'pending'. Which component is most likely causing the delay?
Select an answer first
40foundation · easy
How does MDM provision security certificates to managed devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.