A user reports that their corporate smartphone is receiving phishing SMS messages that appear to come from the company's IT department. The messages ask the user to click a link and enter their corporate credentials. The user has not clicked the link. What is the most appropriate response to prevent this threat from affecting other users?

Click the link to see what the phishing site looks like

Report the phishing SMS to the IT security team and block the sender's number on the device

Ignore the message and delete it from the device

Change the user's corporate password immediately

A company allows employees to install apps on their corporate-owned smartphones. The security team is concerned about malicious apps requesting excessive permissions. Which control should be implemented to reduce this risk?

Use an MDM solution to whitelist approved apps and block unapproved ones

Instruct users to read permission prompts before installing

Rely on the app store's own security review process

Disable the app store on all devices

What is a secure container on a mobile device?

A separate, encrypted area that stores corporate data and apps

A physical case that protects the device from damage

A cloud storage service for backing up photos

GIAC Security Essentials

Domain 6Objective 1

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 11)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 51–53

51expert · hard
A user reports that their corporate smartphone is receiving phishing SMS messages that appear to come from the company's IT department. The messages ask the user to click a link and enter their corporate credentials. The user has not clicked the link. What is the most appropriate response to prevent this threat from affecting other users?
Select an answer first
52application · medium
A company allows employees to install apps on their corporate-owned smartphones. The security team is concerned about malicious apps requesting excessive permissions. Which control should be implemented to reduce this risk?
Select an answer first
53foundation · easy
What is a secure container on a mobile device?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 11)

Questions 51–53

A company allows employees to install apps on their corporate-owned smartphones. The security team is concerned about malicious apps requesting excessive permissions. Which control should be implemented to reduce this risk?

What is a secure container on a mobile device?

Keep studying — Data Protection and Emerging Technologies