A regional hospital issues Android tablets to nurses for shift scheduling and medication lookup. The tablets are shared across shifts and must never leave the ward. Nurses should not be able to install personal apps or browse the web, but the hospital needs to push a scheduling app and a medication database app. Which Android Enterprise deployment model should the MDM administrator choose?

Fully managed device with a locked task mode and kiosk configuration

Dedicated device with a work profile enabled

Work profile on a personally enabled device

Corporate-owned, personally enabled (COPE) with device owner

What is the primary advantage of using managed Google Play for distributing apps to managed Android devices?

It allows apps to be distributed via email links.

It provides a secure, centralized platform for app approval, deployment, and updates, integrated with Android Enterprise.

It allows users to install any app from the public Play Store without restrictions.

It enables apps to be installed without requiring any MDM agent.

A logistics company uses Android Enterprise fully managed devices for its drivers. The company has an in-house navigation app that must be installed on all devices. The app requires a server URL and a driver ID to function. The IT team wants to push the app to all devices and configure it without manual input on each device. What is the most efficient method to achieve this?

Use a private app store hosted on the company web server

Email the APK to drivers and ask them to install it manually

Publish the app to managed Google Play and apply managed configurations

Sideload the APK via ADB and use a device policy controller to set the server URL

An organization uses Android Enterprise work profiles on employee devices. The security team wants to prevent corporate email attachments from being opened in personal apps, but also wants to allow employees to use personal apps for non-work activities. The MDM administrator needs to configure the work profile to block the transfer of corporate data to personal apps. What is the most effective control?

Disable personal apps on the device

Set the work profile to automatically wipe on any data transfer

Enable DLP policies in the work profile to block sharing from work apps to personal apps

Use app whitelisting to only allow work apps

In an Android Enterprise work profile, what is the primary mechanism to prevent corporate data from being copied into personal apps?

Encrypting the entire device with a strong password.

Installing a third-party firewall on the device.

Data leakage prevention policies that restrict copy/paste and file sharing between work and personal profiles.

Using a VPN on the work profile.

GIAC Mobile Device Security Analyst

Domain 1Objective 1

Managing Android Devices and Applications GMOB Practice Questions (Page 2)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 6–10

6application · medium
A regional hospital issues Android tablets to nurses for shift scheduling and medication lookup. The tablets are shared across shifts and must never leave the ward. Nurses should not be able to install personal apps or browse the web, but the hospital needs to push a scheduling app and a medication database app. Which Android Enterprise deployment model should the MDM administrator choose?
Select an answer first
7foundation · easy
What is the primary advantage of using managed Google Play for distributing apps to managed Android devices?
Select an answer first
8application · medium
A logistics company uses Android Enterprise fully managed devices for its drivers. The company has an in-house navigation app that must be installed on all devices. The app requires a server URL and a driver ID to function. The IT team wants to push the app to all devices and configure it without manual input on each device. What is the most efficient method to achieve this?
Select an answer first
9expert · hard
An organization uses Android Enterprise work profiles on employee devices. The security team wants to prevent corporate email attachments from being opened in personal apps, but also wants to allow employees to use personal apps for non-work activities. The MDM administrator needs to configure the work profile to block the transfer of corporate data to personal apps. What is the most effective control?
Select an answer first
10foundation · easy
In an Android Enterprise work profile, what is the primary mechanism to prevent corporate data from being copied into personal apps?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.

Managing Android Devices and Applications GMOB Practice Questions (Page 2)

Questions 6–10

What is the primary advantage of using managed Google Play for distributing apps to managed Android devices?

In an Android Enterprise work profile, what is the primary mechanism to prevent corporate data from being copied into personal apps?

Keep studying — Mobile Device Management and Security