Securing Mobile Devices CSCU Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A healthcare clinic issues Android tablets to nurses for documenting patient visits. The tablets contain sensitive patient records and are sometimes used outside the clinic. The clinic wants to ensure that if a tablet is lost, the data on it cannot be read, and that the nurses can still back up their notes. Which configuration should the IT administrator implement?

   • ADisable encryption to improve tablet performance and rely on a strong screen lock.
   • BEnable file-level encryption only on the notes app and skip backups to save time.
   • CUse a third-party backup app that stores data on the nurses' personal cloud accounts.
   • DEnable full-disk encryption and configure automatic backups to the clinic's encrypted cloud storage.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a secure way to connect a mobile device to a Bluetooth accessory?

   • AKeep Bluetooth discoverable at all times
   • BUse Bluetooth only in public places
   • CPair with any device that requests a connection
   • DPair the device in a private location and use a strong PIN or passkey
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company's security policy requires all employees to use two-factor authentication (2FA) for accessing corporate resources on mobile devices. An employee uses a TOTP authenticator app on their personal phone. The employee's phone is stolen. The employee immediately reports the theft to IT. What should IT do to minimize the risk of unauthorized access to corporate resources?

   • ARevoke the employee's 2FA enrollment, reset the account password, and issue a temporary 2FA method such as a hardware token or recovery codes.
   • BDisable the employee's email account only and leave other corporate apps active.
   • CAsk the employee to remotely wipe the phone using a tracking app.
   • DWait for the employee to get a new phone and then reinstall the authenticator app.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is developing a mobile device security policy for employees who use personal smartphones for work. The policy must address data leakage, malware, and privacy concerns. Employees want to use their personal apps and store personal photos on the same device. Which policy approach best balances corporate security and employee privacy?

   • AAllow employees to use personal devices without any MDM, but require them to sign a security acknowledgment.
   • BProhibit all personal use of the device and require employees to use a company-issued phone.
   • CRequire employees to install a mobile antivirus app and use a VPN for all traffic.
   • DRequire enrollment in an MDM with a containerized work profile, mandate a screen lock and encryption, and allow personal apps outside the work profile.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company with 500 employees uses a BYOD policy for smartphones. The IT team must enforce a minimum screen lock, require device encryption, and be able to remotely wipe corporate data if a device is lost. However, employees are concerned about privacy and do not want IT to have visibility into their personal apps and messages. Which MDM approach best balances security requirements and employee privacy?

   • ADeploy an MDM with a containerized work profile that enforces policies only on the corporate partition and allows selective wipe of work data.
   • BRequire employees to install a certificate on their devices and use a VPN for all traffic.
   • CDeploy an MDM that has full device administration and can view all apps and messages on the device.
   • DAsk employees to sign a waiver allowing IT to wipe the entire device if it is lost.
   Reveal Solution Discussion Select an answer first