Mobile Device Management (MDM) Concepts NDE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the primary function of application management in MDM?

   • ATo centrally distribute, update, and remove applications on managed devices
   • BTo monitor user activity within applications
   • CTo develop custom applications for the organization
   • DTo block all third-party applications from being installed
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A large retail chain is implementing MDM for its store managers' personal smartphones (BYOD) and company-owned tablets used for inventory (COPE). The security team wants to enforce a 6-character passcode on all devices, but store managers argue that a 6-character passcode is too inconvenient for personal use. The COPE tablets are used by multiple employees during a shift and need to be unlocked quickly. The company also requires that corporate email be accessible on both device types. What is the best MDM policy configuration to balance security and usability?

   • AUse biometric authentication (fingerprint or face) as the sole authentication method on all devices, removing the need for a passcode.
   • BApply a 6-character passcode policy to COPE tablets, and apply a less restrictive 4-character passcode policy to BYOD devices, with corporate email access conditional on the device being compliant.
   • CDisable passcode requirements on COPE tablets because they are used by multiple employees, and enforce a 6-character passcode only on BYOD devices.
   • DApply the same 6-character passcode policy to all devices, and require BYOD users to accept the policy or lose access to corporate email.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A financial services company uses MDM to manage employee smartphones. The compliance officer needs a monthly report showing which devices have an active screen lock, which have not been updated to the latest OS version, and which have been jailbroken or rooted. The administrator notices that some devices are not reporting their compliance status. What should the administrator do to ensure the compliance report is accurate?

   • AManually check each non-reporting device by asking employees to send a screenshot of their settings screen showing the screen lock and OS version.
   • BRemove the non-reporting devices from the MDM and assume they are compliant because they were compliant at the time of enrollment.
   • CExtend the compliance reporting interval to 90 days so that devices that occasionally miss a heartbeat are still counted as compliant.
   • DConfigure the MDM to mark non-reporting devices as non-compliant and trigger a re-enrollment prompt or quarantine policy for those devices.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   An organization's compliance team needs to prove to an auditor that all enrolled devices have a screen-lock passcode and encryption enabled. Which MDM feature should the administrator use?

   • AConfigure the MDM to send email alerts when devices are non-compliant.
   • BIntegrate the MDM with a mobile threat defense (MTD) solution.
   • CEnable remote lock on all devices to enforce passcode usage.
   • DGenerate a compliance report from the MDM console showing policy compliance status for each device.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A healthcare provider uses MDM to manage clinician tablets. A security audit reveals that some devices have been jailbroken, allowing users to bypass MDM restrictions. The MDM's current policy only reports jailbreak status but does not block access. The provider needs to prevent jailbroken devices from accessing patient data while also avoiding disruption to clinicians whose devices are incorrectly flagged as jailbroken (false positives). What should the administrator configure?

   • ASend an email alert to the security team for each jailbreak detection, and manually review each case before taking action.
   • BImmediately wipe all devices that report a jailbreak status, regardless of whether the detection is accurate, to ensure patient data is protected.
   • CConfigure a conditional access policy that blocks access to patient data for devices with a confirmed jailbreak status, and set up a grace period for users to remediate or re-enroll before access is revoked.
   • DDisable the jailbreak detection feature in the MDM to avoid false positives, and rely on user education to prevent jailbreaking.
   Reveal Solution Discussion Select an answer first