Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is deploying new Android devices to employees. The security team wants to ensure that if a device is stolen, the data on it is protected. The devices will be used to access corporate email and store attachments locally. Which configuration is REQUIRED to protect data at rest on these devices?

   • ASet the device to automatically lock after 30 minutes of inactivity.
   • BInstall a mobile antivirus app and enable automatic updates.
   • CEnable full-disk encryption and require a strong lock screen PIN.
   • DConfigure the device to use a VPN for all corporate traffic.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company enforces a 6-digit PIN on all mobile devices. An employee's phone is stolen, and the thief is able to guess the PIN and access the device. The phone has full-disk encryption enabled. What is the MOST likely reason the thief was able to access the data?

   • AThe thief removed the storage chip and read it directly.
   • BThe thief used a brute-force attack to try all possible 6-digit combinations.
   • CThe thief exploited a vulnerability in the device's encryption implementation.
   • DThe thief observed the employee entering the PIN before the theft.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is the most immediate and common risk when a mobile device is stolen while unlocked?

   • AAutomatic deletion of the device's operating system
   • BLoss of the device's battery life
   • CPhysical damage to the device hardware
   • DUnauthorized access to personal and corporate data stored on the device
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is implementing a bring-your-own-device (BYOD) policy for accessing corporate email. The security team wants to ensure that if a device is stolen, the corporate data is protected. The devices are a mix of iOS and Android. Which authentication method provides the strongest protection against unauthorized access to a stolen device?

   • AA 6-digit numeric PIN with a short auto-lock timeout.
   • BA pattern lock (Android) or swipe-to-unlock (iOS).
   • CBiometric authentication (fingerprint or face) as the sole unlock method.
   • DA complex alphanumeric passphrase combined with biometric authentication.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization is updating its MDM policies for a fleet of devices used by remote workers. The devices contain sensitive client data. The security team wants to reduce the risk of data exposure if a device is stolen, but they are concerned about user productivity and privacy. Which MDM policy configuration BEST balances security and usability?

   • AEnforce a 30-second auto-lock, require a 6-digit PIN, and enable remote wipe for all devices.
   • BEnforce a 10-minute auto-lock, require a 4-digit PIN, and enable remote lock only.
   • CEnforce no auto-lock, require biometric authentication, and enable remote wipe for all devices.
   • DEnforce a 5-minute auto-lock, require a complex passphrase, and enable remote wipe for all devices.
   Reveal Solution Discussion Select an answer first