Mobile Device Threats and Security Controls NDE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is considering a BYOD policy for its employees. The security team is concerned about the risk of data leakage from personal devices. They want to implement a solution that allows employees to use their own devices while ensuring that corporate data is protected. Which approach should they choose?

   • ARequire employees to use a company-issued device for all work-related tasks
   • BAllow employees to use personal devices but require them to sign a liability waiver
   • CImplement MDM with containerization and selective wipe capabilities
   • DUse a VPN and email encryption on all personal devices
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A healthcare organization allows clinicians to use personal tablets to access patient records. The organization must comply with regulations that require encryption of patient data and the ability to revoke access if a device is lost. Clinicians are concerned about privacy and do not want the organization to be able to see their personal apps or data. Which solution should the organization implement?

   • AUse a mobile application management (MAM) solution that only manages corporate apps without device-level controls.
   • BRequire full-device encryption and remote wipe capability.
   • CProhibit the use of personal tablets and provide company-owned devices.
   • DDeploy an MDM with a managed container for corporate apps and data, and enforce encryption on the container.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a significant risk associated with mobile apps that request excessive permissions?

   • AThe app will automatically uninstall itself
   • BThe app will not be able to connect to the internet
   • CThe app may access sensitive data beyond what is needed for its function
   • DThe device's battery will drain faster
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A remote employee uses a company laptop and a personal smartphone to access corporate email. The employee frequently uses free Wi-Fi at a café. The company wants to secure the email connection without deploying additional hardware. What should the company require?

   • ADisable email sync on the smartphone and use webmail only.
   • BEnable two-factor authentication (2FA) for email access.
   • CUse a personal VPN service on the smartphone.
   • DRequire the use of a corporate VPN when accessing email from the smartphone.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small business is implementing a BYOD policy. The owner wants to allow employees to use personal devices for work but is concerned about data leakage if a device is lost. Which policy element is most important to include?

   • AProhibit the use of personal devices for work entirely.
   • BRequire a strong screen lock and auto-lock after 5 minutes.
   • CRequire employees to sign an acceptable use policy.
   • DMandate MDM enrollment with the ability to selectively wipe corporate data.
   Reveal Solution Discussion Select an answer first