Endpoint Security Mobile Devices CND Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company's mobile devices have been experiencing a rise in infections from malicious apps downloaded from third-party app stores. The security team wants to detect and mitigate these threats on the devices. Which solution should they deploy?

   • AAn MDM policy that restricts app installation to the official app store only.
   • BA network firewall that blocks access to third-party app stores.
   • CA VPN that encrypts all traffic from the mobile devices.
   • DA mobile threat defense (MTD) solution that scans apps and monitors device behavior.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A hospital allows clinicians to use their personal tablets to access patient records through a web portal. The network team is concerned about malware and man-in-the-middle attacks when these devices connect to the hospital's guest Wi-Fi. They want to ensure that all traffic from these devices to the hospital network is encrypted and that the devices are checked for compliance before gaining access. Which solution should they implement?

   • ACreate a separate VLAN for the tablets and restrict access to the patient portal by IP address.
   • BInstall a mobile threat defense (MTD) agent on each tablet and block non-compliant devices.
   • CEnable WPA2 encryption on the guest Wi-Fi and rely on the web portal's HTTPS.
   • DRequire users to connect through a VPN and use network access control (NAC) to check device posture.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A mid-sized company wants to enforce a policy that all corporate-owned mobile devices must have a screen lock, encryption enabled, and the ability to be remotely locked if lost. They want a centralized console to manage these settings. Which technology provides this capability?

   • AA network access control (NAC) appliance.
   • BA mobile threat defense (MTD) platform.
   • CMobile Device Management (MDM) solution.
   • DMobile Application Management (MAM) solution.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An employee's BYOD smartphone is lost. The device is enrolled in an MDM with a container for corporate apps. The employee has personal photos and contacts on the device. The security team needs to protect corporate data but minimize impact on personal data. What should they do?

   • APerform a full device wipe to ensure all data is erased.
   • BRemotely lock the device and wait for the employee to find it.
   • CChange the employee's corporate passwords and revoke certificates.
   • DPerform a selective wipe of the corporate container only.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A consulting firm allows employees to use personal tablets for reading corporate email and accessing a custom client portal. The firm wants to enforce copy/paste restrictions and prevent data leakage from these corporate apps, but does not want to control the rest of the personal device. Which solution should be used?

   • AAsk employees to sign an acceptable use policy and rely on their discretion.
   • BDeploy the corporate apps through a MAM solution with data-loss prevention policies.
   • CUse a VPN that routes all traffic through the corporate gateway.
   • DEnroll the tablets in MDM and enforce a full-device encryption policy.
   Reveal Solution Discussion Select an answer first