Mobile Device Threats and Security Controls NDE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A hospital uses a BYOD policy for its physicians. The physicians use personal tablets to access patient records. The hospital's compliance officer is concerned about data breaches and wants to ensure that if a tablet is lost, the patient data cannot be accessed. The physicians are resistant to full-device encryption because it slows down their devices. Which approach best balances security and usability?

   • AUse a remote wipe that erases the entire device if it is lost
   • BDisable access to patient records on personal devices and require physicians to use only hospital-owned devices
   • CRequire full-device encryption on all personal tablets
   • DUse MDM to enforce a managed container that encrypts only the corporate data and apps, and require a strong passcode for the container
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A marketing employee installs a popular flashlight app on their corporate-owned Android phone. The app requests access to the device's contacts, microphone, and location. The employee grants these permissions. Later, the security team discovers the app is sending contact lists to a third-party server. Which mobile OS feature should have prevented this data exfiltration?

   • AA firewall on the mobile device
   • BRemote wipe capability via the MDM
   • CFull-disk encryption on the device
   • DApp sandboxing and permission controls that limit access to sensitive data
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is a recommended practice for using public Wi-Fi securely on a mobile device?

   • ATurn off the device's firewall
   • BUse a VPN to encrypt your traffic
   • CShare your Wi-Fi password with others
   • DDisable automatic Wi-Fi connection to known networks
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A sales team uses a mobile CRM app that syncs customer data over the internet. The company wants to ensure that the data is protected both when it is stored on the device and when it is transmitted to the cloud. Which combination of controls should be implemented?

   • ARequire a strong passcode and enable two-factor authentication for the CRM app
   • BUse a VPN for all traffic and disable the device's Bluetooth
   • CInstall an antivirus app and enable remote wipe
   • DEnable device encryption and require the app to use TLS for all network communications
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A user is traveling internationally and needs to access corporate resources from a mobile device. The user will be using hotel Wi-Fi. Which security measure should be enforced to protect the connection?

   • AUse a personal hotspot from another device.
   • BDisable Bluetooth to prevent attacks.
   • CUse a VPN that is configured on the device.
   • DTurn off the device's location services.
   Reveal Solution Discussion Select an answer first