Examkin

Question

Difficulty: HardTroubleshooting Mobile OS Security and Connectivity Issues

During a routine compliance audit, an enterprise mobility administrator discovers that a managed mobile device has been installed with an unauthorized third-party configuration payload containing a rogue Certificate Authority (CA) root certificate. This has resulted in man-in-the-middle certificate warnings whenever the user accesses internal HTTPS sites. Which of the following actions should the administrator take FIRST to mitigate this security risk?

  1. Remove the unauthorized configuration payload and delete the custom root certificate from the device storage.Answer
  2. B
    Submit a ticket to the cellular service carrier to reset the mobile device's access point name (APN) settings.
  3. C
    Downgrade the corporate wireless access points to use pre-shared key (PSK) authentication instead of 802.1X enterprise authentication.
  4. D
    Enable third-party application sideloading permissions in the mobile OS settings to allow security override packages.

Answer

Remove the unauthorized configuration payload and delete the custom root certificate from the device storage.
Removing the unauthorized configuration payload and its associated root certificate directly eliminates the untrusted certificate authority from the operating system's trust store. This stops potential man-in-the-middle inspection of secure traffic and restores standard certificate validation routines.

Step-by-Step Solution

1
Identify the source of untrusted SSL/TLS certificate warnings on the mobile device.
Discovered a rogue third-party configuration profile introducing an unauthorized root CA certificate.
Rogue root certificates allow attackers to intercept and inspect encrypted network communications.
2
Locate and remove the offending profile within the mobile operating system management settings.
The unauthorized profile and associated root certificates are deleted from the device's trust store.
Targeted removal eliminates the attack vector without destroying user data or disrupting legitimate carrier profiles.
3
Verify secure connectivity to enterprise resources.
HTTPS connections validate using the legitimate corporate CA without triggering security alerts.
Ensures full restoration of proper TLS certificate chain validation.

Key Concept

Mobile OS Security and MDM Profile Remediation
Rate this question

Topics

Troubleshooting Mobile OS Security and Connectivity Issues

More questions from this topic