An organization needs to ensure that all corporate-owned smartphones have a passcode, are encrypted, and have the latest OS updates installed. The organization wants to enforce these settings automatically without requiring users to manually configure them. Which technology should the organization use?

Mobile Application Management (MAM)

A consulting firm allows employees to use their personal smartphones for work email and calendar access. The firm's security policy requires that if a device is lost or stolen, the corporate email and calendar data must be remotely wiped without affecting the employee's personal photos or apps. Which technology should the firm implement to meet this requirement?

Mobile Device Management (MDM) with full device wipe

Full-disk encryption on the device

Containerization with a full device wipe

Mobile Application Management (MAM) with selective wipe

A company is implementing a BYOD program. The security team wants to ensure that corporate email and internal web applications are protected with a PIN and can be remotely wiped, while employee personal apps like social media and banking remain outside the company's management scope. Which approach should the security team implement?

Apply file-level encryption to all apps on the device

Enroll the entire device in MDM and apply a device-level PIN policy

Use containerization to create a separate, managed workspace for corporate apps

Deploy a mobile threat defense (MTD) solution to all apps

A financial advisor uses a company-issued tablet to access client portfolios. The tablet contains sensitive financial data stored locally. The advisor also uses the tablet for personal web browsing. The company wants to ensure that the financial data is encrypted at rest, but the advisor's personal browsing data does not need to be encrypted. Which approach should the company take?

Use Transport Layer Security (TLS) for all network connections

Enable full-disk encryption on the tablet

Apply encryption only to the email application

Use a containerized workspace with file-level encryption for corporate data

A healthcare organization is deploying tablets to doctors. The tablets will store patient records, which are subject to strict regulatory compliance. The organization requires that all data at rest be encrypted, but also needs to support multiple doctors using the same tablet with different user profiles. Which encryption approach should the organization use?

Full-disk encryption (FDE) with a single passcode

File-level encryption (FLE) with per-user keys

Containerization with a single encryption key

Encryption only for the patient records database

Systems Security Certified Practitioner

Domain 7Objective 3

7.3 - Administer and Manage Mobile Devices SSCP Practice Questions (Page 3)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

15%of the exam

Questions 11–15

11application · easy
An organization needs to ensure that all corporate-owned smartphones have a passcode, are encrypted, and have the latest OS updates installed. The organization wants to enforce these settings automatically without requiring users to manually configure them. Which technology should the organization use?
Select an answer first
12application · medium
A consulting firm allows employees to use their personal smartphones for work email and calendar access. The firm's security policy requires that if a device is lost or stolen, the corporate email and calendar data must be remotely wiped without affecting the employee's personal photos or apps. Which technology should the firm implement to meet this requirement?
Select an answer first
13application · medium
A company is implementing a BYOD program. The security team wants to ensure that corporate email and internal web applications are protected with a PIN and can be remotely wiped, while employee personal apps like social media and banking remain outside the company's management scope. Which approach should the security team implement?
Select an answer first
14application · medium
A financial advisor uses a company-issued tablet to access client portfolios. The tablet contains sensitive financial data stored locally. The advisor also uses the tablet for personal web browsing. The company wants to ensure that the financial data is encrypted at rest, but the advisor's personal browsing data does not need to be encrypted. Which approach should the company take?
Select an answer first
15expert · hard
A healthcare organization is deploying tablets to doctors. The tablets will store patient records, which are subject to strict regulatory compliance. The organization requires that all data at rest be encrypted, but also needs to support multiple doctors using the same tablet with different user profiles. Which encryption approach should the organization use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

7.3 - Administer and Manage Mobile Devices SSCP Practice Questions (Page 3)

Questions 11–15

Keep studying — Systems and Application Security