Endpoint Security Mobile Devices CND Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is developing a mobile app that handles sensitive customer data. The security team wants to ensure the app is secure before deployment. They have limited resources and need to prioritize the most effective practices. Which practice should they implement first?

   • ARely on the app store's security review process.
   • BUse a third-party obfuscation tool to hide the code.
   • CConduct a threat model and perform static code analysis.
   • DPublish the app to a public app store for beta testing.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which capability is typically provided by a MAM solution?

   • ASelective wipe of corporate data from managed applications.
   • BProviding a VPN connection for all device traffic.
   • CFull device encryption and remote lock of the entire device.
   • DBlocking all personal apps from being installed on the device.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A device is lost, and the administrator initiates a remote wipe. Later, the device is recovered, and the user finds that some personal data is still present. The company uses MDM with a selective wipe capability. What is the most likely reason personal data remains?

   • AThe device's encryption key was not available to the MDM server.
   • BThe remote wipe command failed because the device was offline.
   • CThe selective wipe only removed corporate-managed apps and their data, not personal data.
   • DThe MDM agent was uninstalled before the wipe command was sent.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is regular auditing of mobile devices important for compliance?

   • ATo improve the device's processing speed.
   • BTo reduce the number of apps installed on the device.
   • CTo increase the device's battery life.
   • DTo verify that devices meet security policies and regulatory requirements.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A financial institution must regularly audit mobile devices to ensure they meet security policies, including encryption and passcode requirements. The compliance team wants automated reports and alerts for non-compliant devices. What should they implement?

   • AUse a mobile threat defense (MTD) solution to detect malware.
   • BConfigure the MDM to generate compliance reports and send alerts for non-compliant devices.
   • CDeploy a VPN to encrypt all traffic.
   • DManually check each device every month.
   Reveal Solution Discussion Select an answer first