Endpoint Security Mobile Devices CND Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A sales executive reports that their company-issued smartphone was stolen from a taxi. The device contains sensitive customer contracts and is enrolled in the corporate MDM. The security team needs to prevent data exposure and also preserve the ability to track the device's location if possible. What should the security team do first?

   • AContact the taxi company and ask them to retrieve the device before taking any action.
   • BChange the user's email password and wait to see if the device connects to the network.
   • CIssue a remote lock and then attempt to locate the device before deciding on a wipe.
   • DInitiate a remote wipe to erase all data on the device immediately.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   An employee reports that their corporate smartphone was stolen from a taxi. The device contains encrypted corporate email and documents. The company's policy requires that the device be rendered unusable and data unrecoverable. What should the administrator do first?

   • AChange the employee's email password and wait for the device to sync.
   • BInitiate a remote wipe of the device through the MDM console.
   • CDisable the device's Wi-Fi and Bluetooth remotely.
   • DSend a text message to the device asking the finder to return it.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company's mobile devices are frequently connecting to public Wi-Fi networks. The security team wants to protect against man-in-the-middle attacks and malicious network traffic. They also want to detect if a device is compromised before it connects to the corporate network. Which combination of solutions should they implement?

   • ADeploy an MDM and enforce a passcode policy.
   • BRequire users to manually enable airplane mode when using public Wi-Fi.
   • CDeploy an MTD solution and require VPN for all corporate traffic.
   • DUse a firewall and network access control (NAC) on the corporate network.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Why is biometric authentication considered an improvement over traditional passwords on mobile devices?

   • ABiometrics are faster but less secure than passwords.
   • BBiometrics are unique to the individual and harder to replicate than a password.
   • CBiometrics do not require any hardware support.
   • DBiometrics can be easily reset if compromised.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company develops an internal mobile app for employees to access HR data. The app was found to store sensitive data in plain text on the device. The security team wants to remediate this and prevent future occurrences. What should they do?

   • AUse MDM to force the app to be removed from all devices.
   • BDeploy a mobile threat defense (MTD) solution to detect the plain-text storage.
   • CEncrypt the device's storage using MDM policies.
   • DRequire the development team to use secure coding practices, including encryption of data at rest, and implement an app vetting process.
   Reveal Solution Discussion Select an answer first