Mobile Device Security ECSS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A developer is creating a mobile banking app. The app needs to access the camera to scan checks, but does not need to access contacts or location. The developer wants to follow the principle of least privilege and reduce the risk of data exfiltration. What should the developer do?

   • AUse a third-party library that requests all permissions to simplify development
   • BRequest camera, contacts, and location permissions at install time to avoid future prompts
   • CDisable the app sandbox to allow direct access to other apps' data for better functionality
   • DRequest only the camera permission and request it at runtime when the user first uses the check-scan feature
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which component is typically included in an MDM solution to allow administrators to manage devices remotely?

   • AAn application store and a code signing tool
   • BA management console and an agent on the device
   • CA hardware firewall and a VPN concentrator
   • DA certificate authority and a DNS server
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of a Bring Your Own Device (BYOD) policy in an organization?

   • ATo define rules for using personal devices for work purposes
   • BTo provide company-owned devices to all employees
   • CTo prohibit employees from using any personal devices
   • DTo replace the need for any security measures
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company allows employees to bring their own smartphones (BYOD) for work email and calendar. The IT department needs to enforce a screen lock and the ability to wipe corporate data if a device is lost, but employees are concerned about IT wiping personal photos. Which MDM approach should be used?

   • AUse a mobile application management (MAM) policy that only manages the corporate email app.
   • BAsk employees to manually set a screen lock and provide instructions for wiping the device themselves.
   • CImplement a containerization solution that separates corporate apps and data, allowing selective wipe of the corporate container.
   • DEnroll devices in a full-device management profile that allows a complete remote wipe.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company allows employees to use personal smartphones for work email and calendar. The security team wants to enforce a screen-lock policy, require encryption on the device, and be able to selectively wipe corporate data if a device is lost, without wiping personal photos and apps. Which solution should they implement?

   • AMobile device management (MDM) with a containerized corporate workspace
   • BContainerization using a third-party sandbox app without MDM enrollment
   • CUnified endpoint management (UEM) with full-device wipe capability
   • DMobile application management (MAM) with per-app VPN and app-level wipe
   Reveal Solution Discussion Select an answer first