Mobile Device Threats and Security Controls NDE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A small law firm allows attorneys to use personal tablets for client communication. The firm's BYOD policy requires that the firm can remove corporate data if an attorney leaves the firm, but the attorney's personal data must remain untouched. Which MDM feature should be configured?

   • AA remote lock that requires the attorney to contact IT to unlock
   • BContainerization with a managed corporate profile that can be selectively wiped
   • CFull device encryption with a recovery key escrowed to the firm
   • DA policy that forces the attorney to uninstall the corporate email app
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company issues corporate-owned smartphones to employees. A device is stolen, and the security team needs to ensure that data on the device cannot be accessed and that the device becomes unusable. Which combination of controls should be used?

   • AScreen lock and app sandboxing
   • BMDM enrollment and containerization
   • CVPN and antivirus
   • DFull-disk encryption and remote wipe
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which mobile security control is designed to erase all data on a lost or stolen device to prevent unauthorized access?

   • ARemote wipe
   • BApp sandboxing
   • CScreen lock
   • DTwo-factor authentication
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An employee connects their corporate smartphone to a public Wi-Fi network at an airport and notices that the phone's browser displays a warning about an untrusted certificate when accessing the corporate webmail. The employee ignores the warning and logs in. Which type of mobile threat did the employee just encounter?

   • AA man-in-the-middle attack attempting to intercept the login credentials
   • BA phishing attack via a malicious email attachment
   • CA malware infection that has modified the browser's certificate store
   • DA denial-of-service attack on the corporate webmail server
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A multinational corporation is implementing a BYOD policy for employees in different countries. Some countries have strict data residency laws, while others have strong employee privacy protections. The corporation wants to enforce a consistent security baseline while respecting local laws. Which approach is most appropriate?

   • AUse a single cloud provider located in the corporation's home country for all data.
   • BImplement a global MDM policy that requires containerization and selective wipe, but allow regional variations for data storage location and privacy monitoring.
   • CApply the same strict monitoring and data storage policy in all countries.
   • DProhibit BYOD in countries with strict privacy laws.
   Reveal Solution Discussion Select an answer first