A security administrator is updating Mobile Device Management (MDM) policy profiles for mobile devices connecting to corporate data under a Bring Your Own Device (BYOD) initiative. The security strategy requires isolating corporate data from personal applications to prevent data leakage and prohibiting users from installing unverified applications from unofficial app stores. Which TWO of the following security controls should the administrator implement to meet these requirements? (Select TWO.)
- Enforce app containerization with data loss prevention (DLP) copy-paste restrictionsAnswer
- BConfigure an immediate full-device remote wipe after a single failed local passcode entry
- Restrict app installation sources by disabling app sideloading on all enrolled devicesAnswer
- DDeploy perimeter bollards and physical lockboxes around all remote employee workstations
Answer
The correct controls are enforcing app containerization with data loss prevention restrictions and disabling application sideloading on all enrolled mobile devices.
The correct options implement containerization (which separates enterprise app data from personal apps via encryption and DLP rules) and disable application sideloading (which stops the installation of third-party apps from unverified sources).
Step-by-Step Solution
Key Concept
Mobile Device Management (MDM) BYOD controls including containerization and restricting application sources (sideloading restrictions).