Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An organization's MDM administrator is responding to a stolen device incident. The device is enrolled in the MDM and has a remote wipe command pending. The device has been offline for several hours. The administrator also has the option to send a remote lock command. What is the BEST course of action to maximize the chance of data protection?

   • ASend only the remote lock command to avoid the risk of data loss if the device is recovered.
   • BSend both remote lock and remote wipe commands; the MDM will queue them and execute the wipe when the device reconnects.
   • CWait for the device to come online and then decide which command to send based on its location.
   • DSend only the remote wipe command, as it will also lock the device automatically.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A user's corporate tablet is stolen from a hotel room. The tablet had a weak 4-digit PIN and was not encrypted. The user had a corporate VPN client installed and had saved the VPN password in the app. The IT team has been notified. Which incident response step should be performed FIRST?

   • AChange the user's email password and notify the email administrator.
   • BRevoke the user's VPN credentials and all other corporate credentials that were stored on the device.
   • CInitiate a remote wipe of the device to erase the stored VPN password.
   • DContact the hotel security to review surveillance footage.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which MDM policy is specifically designed to automatically erase a device after a certain number of failed unlock attempts?

   • AAuto-lock policy
   • BCertificate policy
   • CGeofencing policy
   • DMaximum failed attempts policy (wipe after N attempts)
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is the FIRST step an individual should take after realizing their mobile device has been stolen?

   • AWait a few hours to see if the device is returned
   • BChange passwords for critical accounts (email, banking, social media)
   • CReport the theft to the police
   • DContact the device manufacturer to request a replacement
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An employee's company-issued iPhone is stolen from a gym locker. The employee had the device set to automatically back up to iCloud. The company uses an MDM that supports remote wipe. What is the FIRST step the administrator should take?

   • AChange the employee's corporate account passwords and revoke active sessions.
   • BDisable the employee's iCloud backup to prevent data from being restored to a new device.
   • CContact the gym to review security footage and attempt to identify the thief.
   • DInitiate a remote wipe of the iPhone through the MDM console.
   Reveal Solution Discussion Select an answer first