Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

A security administrator is deploying mobile tablets to field service technicians who collect sensitive customer account details. The organization allows technicians to use these corporate-enrolled tablets for personal tasks during off-hours. To comply with data privacy regulations, corporate data must be completely encrypted and isolated from personal applications, and administrators must be able to remove company records if a device is lost without destroying personal photos or files. Which of the following mobile security controls should the administrator implement to meet both requirements?

  1. Containerization with selective wipe functionalityAnswer
  2. B
    Full device remote wipe triggered immediately upon a failed passcode attempt
  3. C
    WPA3-Enterprise authentication profiles enforced across all public cellular connections
  4. D
    Cable lock tethering paired with tamper-evident physical security enclosures

Answer

Containerization with selective wipe functionality is the correct control because it logically separates corporate applications and confidential records from personal data on mobile devices, allowing administrators to remove enterprise storage without affecting personal user content.
Containerization establishes a secure, encrypted logical partition for enterprise applications and corporate customer data on mobile devices. Paired with selective wipe management through Mobile Device Management (MDM) or Mobile Application Management (MAM) solutions, IT administrators can remotely sanitize corporate records upon device loss while leaving personal photos, apps, and files intact.

Step-by-Step Solution

1
Analyze the technical requirements of the scenario.
Identified two primary requirements: isolation of corporate data from personal applications, and the ability to wipe corporate files without erasing personal user data.
Security controls on mobile devices must balance enterprise protection with user privacy in mixed-use scenarios.
2
Evaluate storage separation technologies.
Containerization (storage segmentation) creates a secure, encrypted sandbox for corporate apps and data on the mobile OS.
Logical boundary enforcement prevents unapproved personal applications from accessing sensitive company records.
3
Match the remote management capability to the required wipe policy.
Selective wipe targets only the enterprise container, fulfilling the remote removal requirement while preserving personal photos and personal application data.
Full device wipes destroy all storage partitions indiscriminately, failing the privacy requirement.

Key Concept

Mobile Device Containerization and Selective Wipe
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic