A company has a mix of supervised and unsupervised iOS devices. The security team wants to ensure that all devices are encrypted and that a lost device can be remotely wiped. They also want to prevent users from disabling the passcode. Which combination of features should be used?

Enforce a passcode policy via a configuration profile on all devices, and use the MDM's remote wipe command on all devices.

Use Activation Lock on all devices to prevent passcode removal.

Use a configuration profile to enable Data Protection on all devices, and use the MDM's 'DeviceLock' command to wipe the device.

Use a supervision identity on all devices to enable encryption and remote wipe.

A company's compliance policy requires that all iOS devices have a passcode of at least 8 characters and that the device be encrypted. The administrator deploys a configuration profile with a passcode policy. After deployment, some devices are reported as non-compliant. What is the most likely reason?

The devices have a passcode that was set before the profile was installed, and the profile does not force a change.

The devices are running an iOS version that does not support 8-character passcodes.

The MDM server is not sending the 'DeviceLock' command to enforce the policy.

The devices are not supervised, so the passcode policy cannot be enforced.

An iOS device is not receiving MDM commands. Which of the following is a common first troubleshooting step?

Check the device's battery level

Verify that the device has network connectivity and can reach the MDM server

What is the primary purpose of monitoring iOS devices in an enterprise MDM environment?

To detect security issues and ensure devices remain compliant with organizational policies

To read employees' personal emails and messages

To increase device battery life

To track the physical location of employees at all times

Which of the following is a common method to install a configuration profile on an iOS device?

Copying the profile to the device's file system using a USB cable

Sending the profile as an email attachment and opening it on the device

Using AirDrop to transfer the profile to the device

Installing the profile from the App Store

GIAC Mobile Device Security Analyst

Domain 1Objective 2

Managing iOS Devices and Applications GMOB Practice Questions (Page 6)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

Questions 26–30

26expert · hard
A company has a mix of supervised and unsupervised iOS devices. The security team wants to ensure that all devices are encrypted and that a lost device can be remotely wiped. They also want to prevent users from disabling the passcode. Which combination of features should be used?
Select an answer first
27application · medium
A company's compliance policy requires that all iOS devices have a passcode of at least 8 characters and that the device be encrypted. The administrator deploys a configuration profile with a passcode policy. After deployment, some devices are reported as non-compliant. What is the most likely reason?
Select an answer first
28foundation · easy
An iOS device is not receiving MDM commands. Which of the following is a common first troubleshooting step?
Select an answer first
29foundation · easy
What is the primary purpose of monitoring iOS devices in an enterprise MDM environment?
Select an answer first
30foundation · easy
Which of the following is a common method to install a configuration profile on an iOS device?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.