In an MDM environment, what is the primary purpose of using managed configurations (also known as app restrictions) when deploying an application to managed Android devices?

To customize the app's behavior and settings according to enterprise policies without user intervention.

To ensure the app is automatically updated to the latest version.

To prevent the app from being uninstalled by the user.

To verify the app's digital signature before installation.

A company is deploying Android devices to field workers. The devices are corporate-owned and will be used for a single purpose: data collection. The IT team needs to enroll the devices with minimal user interaction and ensure they are automatically configured. However, some devices are older models that do not support zero-touch enrollment. What should the administrator do to enroll these older devices?

Skip enrollment for older devices and manage them manually

Use legacy device admin enrollment for all devices

Use QR code enrollment to provision the older devices

Replace all older devices with newer models that support zero-touch

A company has a custom app that is distributed via managed Google Play. The app has a critical security update that must be deployed immediately to all devices. The MDM administrator needs to ensure that the update is installed as soon as possible. What should the administrator do?

Wait for users to manually update the app

Remove the app from managed Google Play and re-add it

Sideload the updated APK to all devices

Set the app update priority to high in managed Google Play and force the update on all devices

A consulting firm issues Android smartphones to employees. The security policy requires that devices be encrypted and that a screen lock be enforced. The MDM administrator must ensure that if a device is not encrypted or does not have a screen lock, the device is blocked from accessing corporate email. What should the administrator configure?

Set a device password policy and rely on the user to enable encryption

Configure the email app to require a PIN at launch

Use a remote wipe command for any device that is not encrypted

Create a compliance policy for encryption and screen lock, and assign it to a conditional access rule for email

A company is evaluating MDM solutions for its Android devices. The security team wants to ensure that the MDM can enforce device-level policies, such as password complexity and encryption, and can also manage app distribution. Which component of Android device management is essential for this requirement?

Device owner (device admin) API

GIAC Mobile Device Security Analyst

Domain 1Objective 1

Managing Android Devices and Applications GMOB Practice Questions (Page 4)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 16–20

16foundation · easy
In an MDM environment, what is the primary purpose of using managed configurations (also known as app restrictions) when deploying an application to managed Android devices?
Select an answer first
17expert · hard
A company is deploying Android devices to field workers. The devices are corporate-owned and will be used for a single purpose: data collection. The IT team needs to enroll the devices with minimal user interaction and ensure they are automatically configured. However, some devices are older models that do not support zero-touch enrollment. What should the administrator do to enroll these older devices?
Select an answer first
18expert · hard
A company has a custom app that is distributed via managed Google Play. The app has a critical security update that must be deployed immediately to all devices. The MDM administrator needs to ensure that the update is installed as soon as possible. What should the administrator do?
Select an answer first
19application · medium
A consulting firm issues Android smartphones to employees. The security policy requires that devices be encrypted and that a screen lock be enforced. The MDM administrator must ensure that if a device is not encrypted or does not have a screen lock, the device is blocked from accessing corporate email. What should the administrator configure?
Select an answer first
20application · medium
A company is evaluating MDM solutions for its Android devices. The security team wants to ensure that the MDM can enforce device-level policies, such as password complexity and encryption, and can also manage app distribution. Which component of Android device management is essential for this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.

Managing Android Devices and Applications GMOB Practice Questions (Page 4)

Questions 16–20

In an MDM environment, what is the primary purpose of using managed configurations (also known as app restrictions) when deploying an application to managed Android devices?

A company has a custom app that is distributed via managed Google Play. The app has a critical security update that must be deployed immediately to all devices. The MDM administrator needs to ensure that the update is installed as soon as possible. What should the administrator do?

Keep studying — Mobile Device Management and Security