Mobile Device Threats and Security Controls NDE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which mobile threat is most directly associated with tricking a user into entering credentials on a fake login page?

   • APhishing
   • BJailbreaking
   • CBluejacking
   • DRansomware
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a best practice for securely using mobile applications?

   • AUse the same password for all app accounts
   • BDownload apps only from official app stores
   • CInstall apps from third-party websites to get more features
   • DGrant all requested permissions to ensure the app works correctly
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A regional hospital allows physicians to use personal smartphones for on-call duties. The compliance officer requires that if a device is lost, all hospital-related data must be removed, but the physician's personal photos and apps must remain intact. Which control should the hospital implement?

   • AInstall a mobile antivirus app that can remotely delete all apps on the device.
   • BRequire full-device encryption and instruct users to perform a factory reset if the device is lost.
   • CEnroll the devices in an MDM with a containerized work profile and remote wipe of the managed container only.
   • DUse a VPN on the device so that hospital data is encrypted and inaccessible if the device is lost.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A sales representative frequently connects to public Wi-Fi at airports and coffee shops. The company wants to protect data transmitted from the employee's mobile device without requiring changes to the corporate applications. Which control is most effective?

   • AEnable Bluetooth and use a personal hotspot from a company-provided device.
   • BDisable the device's Wi-Fi and use only cellular data.
   • CInstall a firewall app that blocks all incoming connections.
   • DRequire the use of a VPN with strong encryption on the device.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is implementing a BYOD program for 500 employees. The security team must balance employee privacy with the need to protect corporate data. They decide to use MDM with containerization. However, some employees refuse to enroll because they fear the company can see their personal texts and location. Which approach best addresses the employees' privacy concerns while still protecting corporate data?

   • ARequire employees to use a company-issued device instead of their personal device
   • BUse MDM with full device management, including the ability to locate the device and view personal app usage
   • CUse MDM with a work profile that separates corporate apps and data, and configure the MDM to only manage the work profile, not the personal side
   • DAllow employees to opt out of MDM but require them to use a VPN and email encryption
   Reveal Solution Discussion Select an answer first