Mobile Device Security ECSS Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is migrating from a legacy on-premises email system to a cloud-based service. Employees will access email on their mobile devices. The compliance team requires that email data be encrypted at rest and that the company can remove email data from a lost device. Which solution meets these requirements?

   • ARequire users to manually delete the email app and its data if the device is lost.
   • BUse a cloud email service with built-in encryption at rest and an MDM that supports selective wipe of the email app's data.
   • CStore email data only on the server and disable offline access on mobile devices.
   • DUse a VPN to encrypt all traffic between the device and the email server.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A healthcare organization is deploying mobile devices to clinicians. The devices will access patient records, and the organization must comply with data protection regulations. The IT team wants to enforce encryption, remote wipe, and audit logging. Which deployment model best meets these requirements?

   • AA hybrid approach where some devices are BYOD and some are corporate-owned, with different policies.
   • BCorporate-owned, fully managed devices enrolled in MDM with a compliance policy that enforces encryption and remote wipe, and with audit logging enabled.
   • CBYOD devices with a containerization solution that only manages the corporate apps.
   • DCorporate-owned devices with no MDM, relying on the OS's default encryption and manual remote wipe.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security analyst notices that a user's phone is sending large amounts of data to a known malicious IP address at 3 AM. The phone is enrolled in MDM and has a VPN that is always on. The analyst suspects a trojan that is using the VPN tunnel to exfiltrate data. What is the most effective response?

   • APush a remote wipe to the device immediately to destroy the malware.
   • BUpdate the device's antivirus definitions and run a scan.
   • CDisable the VPN and monitor the device's traffic to identify the malicious app.
   • DRevoke the device's certificate and block the device from accessing corporate resources, then perform a forensic analysis of the device.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of a remote wipe feature on a mobile device?

   • ATo update the device's operating system
   • BTo clean the device's screen and ports
   • CTo remove malware from the device
   • DTo erase all data on the device remotely if it is lost or stolen
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which security measure is most effective for protecting data transmitted over a public Wi-Fi network on a mobile device?

   • AUsing a virtual private network (VPN)
   • BUsing a longer Wi-Fi password
   • CIncreasing the screen brightness
   • DTurning off the device's Bluetooth
   Reveal Solution Discussion Select an answer first