Examkin

Question

Difficulty: HardMobile Application Support and Security Settings

A financial services firm is updating its mobile security profile for remote investment advisors operating under a Corporately-Owned, Personally-Enabled (COPE) device policy. Match each mobile security feature or configuration parameter on the left with its primary technical operational purpose on the right.

  • Selective Remote WipeRemoves managed enterprise application data and cryptographic keys while leaving personal files intact.
  • Sideloading Restriction PolicyPrevents execution of unverified application packages from third-party sources outside official app stores.
  • S/MIME Certificate ConfigurationProvides cryptographic message encryption and digital signatures for enterprise mobile mail clients.
  • App ContainerizationEnforces isolated storage and memory spaces between enterprise applications and personal user apps.

Answer

Selective Remote Wipe matches with removing managed enterprise data while leaving personal files intact. Sideloading Restriction Policy matches with preventing execution of unverified packages outside official stores. S/MIME Certificate Configuration matches with providing cryptographic message encryption and digital signatures for mobile mail clients. App Containerization matches with enforcing isolated storage and memory spaces between enterprise and personal applications.
Each feature correctly corresponds to its primary mobile enterprise security function: Selective Wipe isolates administrative destruction to enterprise assets; Sideloading restrictions prevent unauthorized executable installation; S/MIME provides end-to-end email payload encryption/signing via PKI; App Containerization prevents inter-app data leakage between personal and business storage spaces.

Step-by-Step Solution

1
Analyze the operational scope of mobile application security controls in a COPE environment.
Differentiate between device-level management controls (MDM full device wipe) and application-level security controls (MAM containerization and selective wipe).
COPE environments require preserving personal user data while maintaining strict corporate security boundaries.
2
Map each mobile security control to its explicit technical mechanism.
Pair Selective Wipe with partial corporate data removal, Sideloading restrictions with untrusted package blocking, S/MIME with email PKI encryption/signing, and Containerization with app sandbox memory/storage isolation.
Each security mechanism addresses a distinct attack vector or data privacy requirement.

Key Concept

Mobile Application Support and Security Settings
Rate this question

Topics

Mobile Application Support and Security Settings

More questions from this topic