Examkin

Question

Difficulty: MediumTroubleshooting Mobile OS Security and Connectivity Issues

A sales representative using a company-issued mobile device reports that while working at a remote customer location, their smartphone automatically connected to an open Wi-Fi network that shared the exact SSID of the company's secure corporate network. Subsequently, the user received SSL/TLS certificate warnings whenever opening internal enterprise applications. Which of the following Mobile Device Management (MDM) security policies should be enforced to BEST prevent devices from automatically joining unauthorized networks broadcasting corporate SSIDs?

  1. Configure the Wi-Fi configuration profile to disable automatic connection to open Wi-Fi networks and mandate 802.1X server certificate verification.Answer
  2. B
    Contact the cellular service provider to reset the SIM card provisioning profile and re-issue the mobile data plan.
  3. C
    Downgrade the primary corporate wireless network authentication setting from WPA3-Enterprise to WPA2-Personal (PSK).
  4. D
    Revoke device administrator privileges for all installed third-party mobile web browser applications.

Answer

Configure the Wi-Fi configuration profile to disable automatic connection to open Wi-Fi networks and mandate 802.1X server certificate verification.
The correct option addresses the root cause of an Evil Twin rogue access point attack. By deploying an MDM Wi-Fi profile that disables automatic connection to open networks and enforces 802.1X RADIUS server certificate validation, the mobile OS will refuse to join unencrypted networks broadcasting the corporate SSID and will verify the authentic server certificate before exchanging credentials.

Step-by-Step Solution

1
Analyze the incident symptoms presented in the scenario.
The device automatically connected to an unencrypted open network sharing the corporate SSID (an Evil Twin attack), leading to SSL/TLS certificate warnings because the rogue AP intercepted encrypted app traffic.
Identifying the root cause as an auto-connect behavior to an untrusted/rogue wireless network is necessary to determine the proper MDM policy control.
2
Evaluate potential MDM Wi-Fi security controls.
Disabling auto-join for unencrypted open networks stops the device from automatically connecting to open networks. Enforcing server certificate validation under 802.1X ensures the device verifies the RADIUS server identity before authenticating.
This dual policy prevents the mobile OS from falling victim to SSID spoofing.

Key Concept

Rogue Access Point (Evil Twin) Prevention via MDM Wi-Fi Profiles
Rate this question

Topics

Troubleshooting Mobile OS Security and Connectivity Issues

More questions from this topic