Mobile Device Management (MDM) and BYOD Security EHE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare organization allows clinicians to use personal tablets to access patient records. The security team wants to ensure that if a device is lost, only the corporate patient data is erased, while the clinician's personal photos and apps remain intact. Which MDM capability should be configured?

   • ASelective wipe of the corporate container
   • BDevice passcode enforcement
   • CApplication blacklisting
   • DFull device wipe
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A global company with offices in multiple countries is evaluating MDM deployment models. They need to comply with local data residency laws, but also want to minimize latency for device management. Which approach is most appropriate?

   • ADeploy a cloud-based MDM with regional data centers in each country
   • BUse a single on-premises MDM in the headquarters country
   • CUse a hybrid model with a single cloud instance and on-premises gateways
   • DUse a cloud-based MDM with a single data center in a neutral country
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A regional bank is implementing BYOD for its loan officers. The compliance team requires that corporate email and customer records be protected even if an employee's personal device is lost or stolen. The bank also wants to avoid legal disputes over personal data. Which two controls should the MDM administrator prioritize in the BYOD policy?

   • AImplement a certificate-based VPN for corporate resources and disable the camera on enrolled devices.
   • BRequire full-device encryption and enforce a strict password policy on all personal devices.
   • CEnroll devices in MDM and configure a work profile container with selective wipe capability.
   • DInstall a mobile threat defense agent and require the device to pass a jailbreak check before email access.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company's MDM shows that a device is compliant, but the security team suspects a malicious app is exfiltrating data through a covert channel. The MDM cannot detect this. Which action should the team take?

   • AIncrease the MDM polling frequency
   • BDeploy an MTD solution that analyzes app behavior and network traffic
   • CRequire users to update their operating system
   • DDisable the device's camera and microphone
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A regional bank is implementing a BYOD program for its loan officers. The compliance team requires that personal apps on employee phones never access customer financial data, and that the bank can legally separate work data from personal data during an investigation. Which policy component is most essential to include in the BYOD policy before enrollment begins?

   • AA policy that prohibits employees from installing any third-party apps on their personal devices
   • BA consent form that clearly defines the scope of corporate data access, monitoring, and the use of containerization to isolate work data
   • CA requirement that employees use only company-issued devices for all work-related activities
   • DA clause stating that the bank may remotely wipe the entire device upon termination of employment
   Reveal Solution Discussion Select an answer first