A hospital issues iPads to nurses for patient charting. The devices store sensitive patient data and are used in areas with no cellular coverage. The IT team wants to ensure that if an iPad is stolen, the data is unreadable even if the device is later powered on. Which combination of controls is MOST effective?

Install a third-party file-encryption app and disable the lock screen.

Enable FileVault on the iPad and require a 4-digit PIN.

Set the iPad to require a password only after 15 minutes of inactivity.

Rely on the iPad's built-in hardware encryption and enforce a strong passcode.

A company's MDM administrator is trying to locate a stolen iPhone that is enrolled in the corporate MDM. The device is in a densely populated urban area, and the administrator has access to the MDM's location services. The device's GPS is disabled by the user, but Wi-Fi and cellular radios are active. What is the most accurate method the administrator can use to estimate the device's location?

Use the device's IP address to determine its physical location.

Use the MDM's location service, which will use Wi-Fi positioning and cellular triangulation as fallbacks when GPS is unavailable.

Ask the carrier to provide real-time cell tower triangulation data directly to the administrator.

Rely on the device's last known GPS coordinates from the MDM, even if they are several hours old.

A company's MDM shows a stolen laptop's last known location as a city block. The laptop has a GPS receiver and a cellular modem. The laptop is currently offline. Which action is MOST likely to help locate the laptop?

Use the last known GPS coordinates and dispatch security to that exact spot.

Use cellular triangulation to get a general area and coordinate with law enforcement.

Use the MDM to send a remote lock command and wait for the laptop to check in.

Wait for the laptop to connect to Wi-Fi and then use Wi-Fi positioning.

GIAC Mobile Device Security Analyst

Domain 1Objective 3

Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 9)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

8concepts

Questions 41–44

41application · medium
A hospital issues iPads to nurses for patient charting. The devices store sensitive patient data and are used in areas with no cellular coverage. The IT team wants to ensure that if an iPad is stolen, the data is unreadable even if the device is later powered on. Which combination of controls is MOST effective?
Select an answer first
42application · medium
A company's MDM administrator is trying to locate a stolen iPhone that is enrolled in the corporate MDM. The device is in a densely populated urban area, and the administrator has access to the MDM's location services. The device's GPS is disabled by the user, but Wi-Fi and cellular radios are active. What is the most accurate method the administrator can use to estimate the device's location?
Select an answer first
43expert · hard
A company's MDM shows a stolen laptop's last known location as a city block. The laptop has a GPS receiver and a cellular modem. The laptop is currently offline. Which action is MOST likely to help locate the laptop?
Select an answer first
44foundation · easy
Which authentication method provides the strongest protection against unauthorized access to a stolen mobile device?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.

Mitigating Against Stolen Mobile Devices GMOB Practice Questions (Page 9)

Questions 41–44

A company's MDM shows a stolen laptop's last known location as a city block. The laptop has a GPS receiver and a cellular modem. The laptop is currently offline. Which action is MOST likely to help locate the laptop?

Which authentication method provides the strongest protection against unauthorized access to a stolen mobile device?

Keep studying — Mobile Device Management and Security