Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company allows employees to install third-party apps on their corporate-owned smartphones. A recent incident involved a malicious app that accessed contacts and sent them to an external server. To prevent this, the security team wants to enforce a policy that limits app permissions. Which MDM policy should be implemented?

   • ADisable the device's ability to send SMS messages
   • BRestrict app installation to approved apps from the managed app catalog
   • CAllow installation from any source but require the user to accept all permissions
   • DRequire the user to manually review app permissions before installation
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company's mobile app development team is creating a new corporate app that will handle sensitive financial data. The security team wants to ensure the app follows best practices for data protection on mobile devices. Which control should be implemented within the app?

   • AUse platform-provided encryption APIs to encrypt data at rest in the app's local storage
   • BDisable all app permissions to minimize data access
   • CRely on the device's screen lock to protect app data
   • DStore data in a plain text database for performance
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company is implementing a COPE program and wants to ensure that corporate data on the devices is protected even if the device is lost or stolen. The security team is considering using a secure container for corporate apps and data. However, some employees need to use the native email app to access corporate email, which is not supported in the container. What should the security team do?

   • AUse MDM to enforce device-level encryption and remote wipe, and allow the native email app with a conditional access policy
   • BRequire employees to use a third-party email app that supports the secure container
   • CAllow native email but do not enforce any additional controls
   • DDisable native email access and require employees to use a webmail interface
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A DLP administrator is creating a policy to prevent the exfiltration of source code via email. The source code is stored in a central repository, and developers often copy code snippets into emails. The administrator wants to detect full source files but allow small code snippets for collaboration. Which detection technique should be used?

   • AUse document fingerprinting on the source files and set a threshold for the number of matching lines
   • BUse machine learning to classify emails as containing source code
   • CUse regex to match the file extension of source code files
   • DUse keyword matching for common code terms like 'function' and 'class'
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is implementing MDM for a mix of corporate-owned and BYOD devices. The security team wants to enforce a policy that requires a PIN and encryption on all devices. However, some BYOD users have older devices that do not support the required encryption standard. What should the MDM administrator do?

   • AEnforce the same policy on all devices and block non-compliant devices from accessing corporate resources
   • BRequire all BYOD users to switch to corporate-owned devices
   • CAllow BYOD devices to be exempt from the encryption requirement
   • DCreate separate MDM policies for corporate-owned and BYOD devices, with a grace period for BYOD users to upgrade their devices
   Reveal Solution Discussion Select an answer first