Mobile Device Security ECSS Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company uses a BYOD policy where employees access corporate data through a containerized app. An employee's device is lost, and the container is protected by encryption. The IT team needs to ensure that the corporate data cannot be accessed even if the device is later recovered by an attacker. Which action should IT take?

   • ARemotely wipe the container using the MDM, which will delete the encryption keys and make the data unrecoverable
   • BDo nothing because the container encryption is sufficient to protect the data
   • CChange the employee's corporate password and rely on the container's encryption to protect the data
   • DAsk the employee to remotely lock the device using a find-my-device service
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which type of attack involves an attacker intercepting and potentially altering communication between two mobile devices?

   • ADenial-of-service (DoS) attack
   • BRansomware attack
   • CMan-in-the-middle (MITM) attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A salesperson's company-issued smartphone is stolen. The device contains encrypted corporate data and is enrolled in the company's MDM. The IT team wants to prevent the thief from accessing the data and also ensure the data is not recoverable if the device is later found. What should IT do FIRST?

   • AIssue a remote lock and then a remote wipe command through the MDM
   • BContact the carrier to disable the SIM card only
   • CDo nothing because the device is encrypted and the data is safe
   • DChange the employee's email password and wait for the device to be recovered
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company's security policy requires that mobile devices used for corporate data have a strong authentication method. However, employees complain that typing a complex password on their phones is time-consuming. Which alternative authentication method provides a good balance of security and usability?

   • AA 4-digit PIN with no fallback
   • BA swipe pattern with no timeout
   • CBiometric authentication (fingerprint or face) with a fallback to a strong PIN
   • DNo authentication if the device is used only for email
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company is updating its BYOD policy to comply with new data protection regulations. The policy must ensure that corporate data on personal devices is protected, but employees are concerned about privacy. Which approach BEST balances regulatory compliance and employee privacy?

   • AUse an MDM that separates corporate and personal data into containers, and only enforce policies on the corporate container
   • BProhibit BYOD entirely and issue company-owned devices
   • CUse a mobile application management (MAM) solution that only manages corporate apps, without device-level controls
   • DRequire employees to sign a waiver allowing the company to monitor all device activity
   Reveal Solution Discussion Select an answer first