Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A retail company provides employees with smartphones for inventory management. The phones are often left on counters and have been stolen twice in the past year. The company wants to reduce theft and minimize data exposure. Which combination of measures is MOST effective?

   • ATrain employees to keep phones with them and enable remote wipe.
   • BRequire a complex password and enable auto-lock after 5 minutes.
   • CUse a physical tether to secure the phones to the counter.
   • DInstall a tracking app that can locate the phone.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A healthcare organization issues iPads to clinicians for accessing electronic health records (EHR). The devices contain a PIN and use Touch ID. The organization wants to ensure that if a device is stolen, the data on it remains protected even if the attacker removes the SIM card and disables network connectivity. Which additional control should the organization implement to best meet this requirement?

   • AConfigure the iPads to require a passcode and enable Data Protection, which encrypts files using the device's hardware encryption key.
   • BSet the iPads to automatically erase after 10 failed passcode attempts.
   • CInstall a third-party full-disk encryption app on the iPads.
   • DEnable FileVault on the iPads to encrypt the entire storage volume.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company's MDM administrator is configuring policies for a fleet of Android devices used by field technicians. The devices contain sensitive client data and are often left in vehicles. The administrator wants to reduce the risk of data exposure if a device is stolen while also allowing the device to be located. Which MDM policy configuration best achieves this?

   • ARequire the user to manually enable location services only when they suspect theft.
   • BDisable the device's camera and require a complex password for the MDM console.
   • CSet the device to automatically wipe after a single failed unlock attempt.
   • DEnable a short auto-lock timeout, require a strong PIN, and enable the device's location services via MDM.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company's incident response team is handling a stolen device case. The device was encrypted and had a strong passcode. The employee's corporate accounts were protected by MFA. The device is still offline. What is the MOST important action to take?

   • AMonitor the device's location using the MDM.
   • BInitiate a remote wipe and wait for the device to come online.
   • CChange the employee's corporate account passwords and revoke active sessions.
   • DContact law enforcement and provide the device's serial number.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A corporate device is stolen, and the attacker quickly removes the SIM card and connects the device to a computer via USB. The device has file-based encryption enabled and a 6-digit PIN. The attacker attempts to brute-force the PIN by trying all possible combinations. What is the MOST effective protection against this attack?

   • AThe device's built-in rate limiting, which delays or disables further attempts after a certain number of failed PIN entries.
   • BThe device's remote wipe capability, which erases data after a failed unlock attempt.
   • CThe device's USB debugging mode, which blocks data access when the device is locked.
   • DThe device's file-based encryption, which prevents data access even if the PIN is guessed.
   Reveal Solution Discussion Select an answer first