Mobile Device Management (MDM) Concepts NDE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A regional bank allows employees to use personal smartphones for email and calendar access through a BYOD program. The compliance team requires that all devices accessing corporate mail have a screen lock and full-disk encryption, but employees are resisting the installation of a full MDM agent that can view their personal apps and location. Which approach should the administrator implement to satisfy both the security requirement and employee privacy concerns?

   • AUse a certificate-based email profile without MDM enrollment, relying on the email server to enforce encryption and passcode requirements at the transport layer.
   • BRequire full-device enrollment with the MDM agent and configure the server to collect location data only during business hours to minimize privacy intrusion.
   • CAllow employees to opt out of encryption if they sign an acceptable use policy acknowledging the risk of data exposure on unencrypted personal devices.
   • DDeploy a containerized MDM profile that enforces passcode and encryption policies only within a managed app container, leaving the personal side of the device unmanaged.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A marketing agency uses MDM to manage employee iPads. The agency stores client campaign assets in a corporate SharePoint site. Employees need to view and edit these assets on their iPads, but the agency wants to prevent employees from saving these files to their personal cloud storage or emailing them externally. Which MDM content management control should be implemented?

   • AConfigure managed access to SharePoint through a managed app with DLP policies that block copy/paste, screen capture, and external sharing of corporate documents.
   • BDisable the iPad's email app and require employees to use a webmail interface for all corporate communication.
   • CAsk employees to use a personal file-sharing app to access SharePoint and manually delete any files after use.
   • DProvide employees with direct access to SharePoint via the Safari browser and rely on the browser's private mode to prevent data leakage.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which statement best describes the role of MDM in an enterprise?

   • AIt is a communication protocol used to connect mobile devices to the internet
   • BIt is primarily used to increase the processing speed of mobile devices
   • CIt provides a framework for managing the entire lifecycle of mobile devices, from enrollment to retirement
   • DIt is a type of antivirus software installed on each mobile device
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which MDM deployment model is hosted on the organization's own servers and managed by its IT staff?

   • ACloud-based
   • BVirtual private cloud
   • COn-premises
   • DHybrid
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   An organization is deploying MDM and wants to ensure that only compliant devices can access corporate resources. They also want to reduce the administrative burden of manually reviewing compliance reports. Which combination of MDM features should they implement?

   • ARemote wipe for all non-compliant devices.
   • BAutomated compliance policies integrated with conditional access, and alerts for non-compliant devices.
   • CManual compliance checks by IT staff and email notifications to users.
   • DDevice enrollment with no further policy enforcement.
   Reveal Solution Discussion Select an answer first