Endpoint Security Mobile Devices CND Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is developing a mobile app that will handle sensitive customer data. The development team wants to ensure the app is secure before release. They have limited budget and need to prioritize security activities. Which combination of activities provides the most cost-effective security assurance?

   • ARely on the app store's security review process.
   • BUse MAM to wrap the app with security policies.
   • CDeploy an MTD solution to protect the app after release.
   • DConduct a security code review and perform penetration testing on the app.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is a recommended best practice for BYOD security policies?

   • ARequire employees to use the same password for personal and corporate accounts.
   • BClearly define acceptable use and data ownership in a written policy.
   • CAvoid any monitoring of employee devices to respect privacy.
   • DAllow employees to disable security features if they find them inconvenient.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company is implementing a BYOD policy. Employees will use personal phones for corporate email and a custom expense app. The legal department requires that corporate data be encrypted and that the company can wipe only corporate data, not personal data. Employees are concerned about privacy. Which approach best balances security and privacy?

   • AUse a VPN and rely on the device's built-in encryption.
   • BUse MAM to containerize corporate apps and enable selective wipe of corporate data.
   • CRequire employees to use a separate corporate-owned device for work.
   • DEnroll all devices in MDM and perform a full device wipe on termination.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company allows employees to use personal devices to access corporate resources. The security team is concerned about devices connecting to malicious Wi-Fi networks. They want to ensure that all corporate traffic is encrypted and that devices are checked for compliance before accessing the network. Which solution should they implement?

   • ADeploy a firewall at the corporate network perimeter.
   • BUse a mobile threat defense (MTD) solution that blocks malicious Wi-Fi networks.
   • CEnforce a strong passcode policy through MDM.
   • DRequire a VPN for corporate traffic and use NAC to assess device compliance.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is a typical output of a mobile device compliance audit?

   • AA list of all personal apps installed on employee devices.
   • BA backup of all device data to the cloud.
   • CA new password for each device.
   • DA report detailing devices that are non-compliant with security policies.
   Reveal Solution Discussion Select an answer first