An employee's corporate smartphone is stolen from a coffee shop. The device was protected by a 4-digit PIN and had no biometric unlock enabled. The employee had a corporate email app and a password manager installed. The employee immediately reports the theft to the IT help desk. What is the MOST critical immediate action the IT team should take to prevent unauthorized access to the employee's accounts?

Remotely lock the device to prevent any further use.

Track the device's location to recover it.

Initiate a remote wipe to erase all data on the device.

Revoke the employee's Active Directory credentials and force a password change.

A healthcare organization uses tablets to access patient records. A tablet is stolen from a nurse's car. The tablet has a 4-digit PIN and is not encrypted. What is the MOST significant risk to the organization?

The thief could extract patient data directly from the tablet's storage because it is not encrypted.

The thief could use the tablet's camera to take pictures of the nurse's home.

The thief could sell the tablet for parts, causing financial loss only.

The thief could use the tablet to access the organization's network if the PIN is guessed.

Which setting on an Android device ensures that the device is encrypted?

Setting a secure lock screen (PIN, pattern, or password)

Installing a third-party launcher

A user's corporate device is stolen, and the user had a password manager app installed that contained credentials for both corporate and personal accounts. The device was protected by a 4-digit PIN. The IT team has been notified. Which incident response action should be prioritized to minimize the impact of the theft?

Revoke all corporate credentials and instruct the user to change passwords for all personal accounts stored in the password manager.

Contact the police and file a theft report before taking any technical actions.

Change only the corporate email password, as personal accounts are not the company's responsibility.

Initiate a remote wipe of the device to erase the password manager data.

GIAC Mobile Device Security Analyst

Domain 1Objective 3

Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 4)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

8concepts

Questions 16–20

16application · medium
An employee's corporate smartphone is stolen from a coffee shop. The device was protected by a 4-digit PIN and had no biometric unlock enabled. The employee had a corporate email app and a password manager installed. The employee immediately reports the theft to the IT help desk. What is the MOST critical immediate action the IT team should take to prevent unauthorized access to the employee's accounts?
Select an answer first
17application · medium
A healthcare organization uses tablets to access patient records. A tablet is stolen from a nurse's car. The tablet has a 4-digit PIN and is not encrypted. What is the MOST significant risk to the organization?
Select an answer first
18foundation · easy
Which setting on an Android device ensures that the device is encrypted?
Select an answer first
19expert · hard
A user's corporate device is stolen, and the user had a password manager app installed that contained credentials for both corporate and personal accounts. The device was protected by a 4-digit PIN. The IT team has been notified. Which incident response action should be prioritized to minimize the impact of the theft?
Select an answer first
20foundation · easy
Which method provides the most accurate location for a stolen mobile device in an urban outdoor environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.

Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 4)

Questions 16–20

A healthcare organization uses tablets to access patient records. A tablet is stolen from a nurse's car. The tablet has a 4-digit PIN and is not encrypted. What is the MOST significant risk to the organization?

Which setting on an Android device ensures that the device is encrypted?

Which method provides the most accurate location for a stolen mobile device in an urban outdoor environment?

Keep studying — Mobile Device Management and Security