An organization's MDM reports that a device is non-compliant because it is rooted. The device contains corporate data and is used to access sensitive information. The security team wants to protect the data and prevent the device from accessing corporate resources. What should the administrator do?

Ignore the compliance issue and allow the device to continue accessing resources

Remove the device from the MDM and let the user continue using it

Block the device from accessing corporate resources and issue a remote wipe

Change the compliance policy to allow rooted devices

What is the primary purpose of enforcing device encryption on Android devices in an enterprise environment?

To ensure the device can connect to corporate Wi-Fi securely.

To block malicious apps from accessing the device's camera.

To protect data at rest from unauthorized access if the device is lost or stolen.

To prevent the device from being rooted or jailbroken.

What is the purpose of applying managed configurations to an app in an enterprise context?

To verify the app's digital signature.

To automatically update the app to the latest version.

To set app-specific settings, such as server URLs or feature toggles, without requiring user input.

To prevent the app from being uninstalled by the user.

A company has a mixed fleet of Android devices: some are fully managed corporate-owned, and some are BYOD with work profiles. The security policy requires all devices to have a screen lock and encryption. The MDM administrator needs to enforce this policy across both device types. What should the administrator do?

Apply a single compliance policy to all devices regardless of type

Enforce the policy only on fully managed devices

Create separate compliance policies for fully managed and work profile devices, and apply them to the respective device groups

Use a device-level policy that applies to both device types

A company adopts a BYOD program where employees use their personal Android phones for work email and calendar. The security team wants to ensure that corporate data in the email app cannot be copied to personal apps. Which Android Enterprise feature should the administrator enable?

Managed Google Play with private apps only

Work profile with data leakage prevention policies

Fully managed device with a device owner

App whitelisting on the personal device

GIAC Mobile Device Security Analyst

Domain 1Objective 1

Managing Android Devices and Applications GMOB Practice Questions (Page 7)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 31–35

31expert · hard
An organization's MDM reports that a device is non-compliant because it is rooted. The device contains corporate data and is used to access sensitive information. The security team wants to protect the data and prevent the device from accessing corporate resources. What should the administrator do?
Select an answer first
32foundation · easy
What is the primary purpose of enforcing device encryption on Android devices in an enterprise environment?
Select an answer first
33foundation · easy
What is the purpose of applying managed configurations to an app in an enterprise context?
Select an answer first
34expert · hard
A company has a mixed fleet of Android devices: some are fully managed corporate-owned, and some are BYOD with work profiles. The security policy requires all devices to have a screen lock and encryption. The MDM administrator needs to enforce this policy across both device types. What should the administrator do?
Select an answer first
35application · medium
A company adopts a BYOD program where employees use their personal Android phones for work email and calendar. The security team wants to ensure that corporate data in the email app cannot be copied to personal apps. Which Android Enterprise feature should the administrator enable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.