Mobile Device Security ECSS Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary purpose of a Mobile Device Management (MDM) solution?

   • ATo enforce security policies and manage mobile devices centrally
   • BTo replace the need for antivirus software on mobile devices
   • CTo provide cellular network coverage for employees
   • DTo develop mobile applications for the organization
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   Several employees report that their company phones are running slowly and displaying pop-up ads. IT suspects a mobile malware infection. What is the FIRST step IT should take to confirm the infection and prevent further damage?

   • AIsolate the affected devices from the corporate network and run a security scan using a reputable mobile security app
   • BDisable Wi-Fi and Bluetooth on all devices and continue normal operations
   • CImmediately perform a factory reset on all affected devices
   • DAsk employees to uninstall any recently installed apps and ignore the pop-ups
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An executive frequently travels internationally and uses their smartphone to access confidential company documents. They often connect to hotel and airport Wi-Fi networks. Which combination of measures would BEST protect the data in transit and on the device?

   • ADisable Wi-Fi and use only cellular data, and set a simple PIN
   • BTurn off Bluetooth and use a screen lock with a pattern
   • CUse a corporate VPN for all internet traffic and enable full-disk encryption on the device
   • DInstall a mobile antivirus app and avoid using public Wi-Fi
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A mobile app developer wants to distribute an app through the official app store. The app will handle sensitive user data. Which practice is MOST important to include in the development lifecycle to reduce the risk of data breaches?

   • ARely on the app store's security review to ensure the app is secure
   • BMinimize the number of app updates to reduce user disruption
   • CUse a third-party analytics SDK that collects as much data as possible
   • DConduct regular security testing, including static analysis and penetration testing, before each release
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is updating its BYOD policy. The legal team requires that the policy clearly states the organization's right to wipe corporate data, but employees want assurance that personal data will not be touched. Which policy element is most important to include?

   • AA clause that the company can perform a full wipe of the device at any time.
   • BA description of the selective wipe capability and the types of data that are considered corporate.
   • CA list of approved apps that employees may install on their devices.
   • DA statement that employees are responsible for backing up personal data.
   Reveal Solution Discussion Select an answer first