A company is implementing a BYOD policy. The security team wants to ensure that corporate data is protected even if the employee's device is compromised by malware. The team decides to isolate corporate apps and data in a secure workspace that requires separate authentication. Which concept is the team implementing?

Mobile Application Management (MAM)

Which capability is a core function of Mobile Device Management (MDM)?

Enforcing security policies such as passcode requirements and remote wipe

Replacing the need for network firewalls and intrusion detection systems

Providing a public app store for employees to download any application

Developing custom mobile applications for the organization

An organization wants to allow employees to use their personal devices to access corporate SharePoint sites. The organization wants to ensure that corporate documents can be viewed but not downloaded or shared to personal apps. Which MAM capability should the organization configure?

Data loss prevention (DLP) policies

App protection policies for authentication

An organization is deploying a custom-built field-service app to its employees. Some employees have corporate-owned devices, and others use personal devices. The app must be available on both types of devices. The organization wants to enforce multi-factor authentication (MFA) for the app and prevent screenshots of sensitive data within the app. Which approach should the organization take?

Use containerization to deploy the app and enforce MFA and screenshot prevention within the container on all devices

Use MDM to deploy the app and enforce MFA and screenshot prevention on corporate devices only

Use a public app store to distribute the app and rely on device-level settings

Use MAM with app protection policies to deploy the app and enforce MFA and screenshot prevention on all devices

Which mobile device provisioning model is characterized by the organization purchasing the device, allowing personal use, and applying full corporate management controls?

Corporate Owned, Personally Enabled (COPE)

Corporate Owned, Business Only (COBO)

Systems Security Certified Practitioner

Domain 7Objective 3

7.3 - Administer and Manage Mobile Devices SSCP Practice Questions (Page 1)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

15%of the exam

Questions 1–5

1application · medium
A company is implementing a BYOD policy. The security team wants to ensure that corporate data is protected even if the employee's device is compromised by malware. The team decides to isolate corporate apps and data in a secure workspace that requires separate authentication. Which concept is the team implementing?
Select an answer first
2foundation · easy
Which capability is a core function of Mobile Device Management (MDM)?
Select an answer first
3application · medium
An organization wants to allow employees to use their personal devices to access corporate SharePoint sites. The organization wants to ensure that corporate documents can be viewed but not downloaded or shared to personal apps. Which MAM capability should the organization configure?
Select an answer first
4expert · hard
An organization is deploying a custom-built field-service app to its employees. Some employees have corporate-owned devices, and others use personal devices. The app must be available on both types of devices. The organization wants to enforce multi-factor authentication (MFA) for the app and prevent screenshots of sensitive data within the app. Which approach should the organization take?
Select an answer first
5foundation · easy
Which mobile device provisioning model is characterized by the organization purchasing the device, allowing personal use, and applying full corporate management controls?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

7.3 - Administer and Manage Mobile Devices SSCP Practice Questions (Page 1)

Questions 1–5

Which capability is a core function of Mobile Device Management (MDM)?

An organization wants to allow employees to use their personal devices to access corporate SharePoint sites. The organization wants to ensure that corporate documents can be viewed but not downloaded or shared to personal apps. Which MAM capability should the organization configure?

Which mobile device provisioning model is characterized by the organization purchasing the device, allowing personal use, and applying full corporate management controls?

Keep studying — Systems and Application Security