Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

An IT security technician is establishing mobile endpoint policies for corporate-issued smartphones used by remote staff. Which TWO of the following configurations should the technician enforce via Mobile Device Management (MDM) to protect stored sensitive data in the event of theft and prevent the execution of unvetted third-party software?

  1. Enable storage encryption and remote wipe capabilitiesAnswer
  2. Disable application sideloading and restrict installation to trusted enterprise repositoriesAnswer
  3. C
    Apply physical privacy filters to prevent unauthorized wireless eavesdropping
  4. D
    Configure WPA2-Personal pre-shared keys for all corporate mobile network traffic

Answer

The technician should enable storage encryption with remote wipe capabilities and disable application sideloading to restrict installations to trusted repositories.
Enabling full storage encryption protects confidential data stored on mobile devices if stolen, while remote wipe allows security teams to erase data over the air. Restricting app installations by disabling sideloading ensures users cannot install potentially malicious unverified third-party software.

Step-by-Step Solution

1
Identify the protection requirement for lost or stolen hardware.
Full device storage encryption ensures data cannot be read offline, and remote wipe allows administrators to erase device contents upon theft.
Addressing data loss due to physical theft requires cryptographic protection at rest and remote sanitization capabilities.
2
Identify the protection requirement for preventing unvetted application execution.
Disabling sideloading ensures devices only install software signed and verified by approved app stores or enterprise repositories.
Unvetted applications installed from untrusted sources often bypass vendor malware checks and introduce malicious payloads.

Key Concept

Mobile Device Management (MDM) Security Controls and Application Hardening
Estimated Time:1m 15s
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic