Endpoint Security Mobile Devices CND Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare organization must ensure that all mobile devices accessing patient data comply with HIPAA. The compliance officer wants to generate reports showing which devices are compliant and which are not. What should the organization implement?

   • AA VPN that encrypts all traffic from the devices.
   • BRegular auditing and reporting through the MDM console.
   • CA manual spreadsheet tracking device compliance.
   • DA mobile threat defense (MTD) solution that only detects malware.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm must prove to auditors that all corporate-owned mobile devices have encryption enabled and are enrolled in the management system. The firm needs an automated way to generate compliance reports on a regular basis. What should the firm implement?

   • AConduct a manual annual audit by asking employees to confirm their device settings.
   • BUse MDM reporting features to query device encryption status and enrollment, and schedule automated compliance reports.
   • CDeploy a mobile threat defense (MTD) agent that only detects malware.
   • DRequire users to email a screenshot of their settings screen each month.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which risk is specifically heightened by the widespread use of mobile devices in the enterprise?

   • AElimination of malware risk because mobile operating systems are inherently secure.
   • BDecreased need for user authentication because devices are personal.
   • CIncreased risk of data leakage through lost or stolen devices and malicious apps.
   • DReduced risk of phishing because mobile email clients filter more effectively.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company notices that several employees' mobile devices are connecting to a rogue Wi-Fi access point that is capturing credentials. The company wants to detect such malicious network activity on devices and respond automatically. Which technology should be added to the mobile security stack?

   • AAn MDM policy that only enforces a passcode.
   • BA VPN that is manually enabled by users.
   • CMobile Threat Defense (MTD) solution with network anomaly detection.
   • DA firewall on the corporate network only.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company issues tablets to field technicians. The tablets contain proprietary diagnostic software and client data. The IT team needs to ensure that if a tablet is lost, the data can be erased remotely, and that only authorized technicians can use the device. Which MDM features should be enabled?

   • ARemote wipe and lock, and device passcode enforcement.
   • BEmail profile configuration and calendar sync.
   • CNetwork access control and VPN configuration.
   • DApp inventory and usage reporting.
   Reveal Solution Discussion Select an answer first