Examkin

Question

Difficulty: EasyMobile Device and Embedded System Security

An organization allows employees to use personal smartphones for work under a Bring Your Own Device (BYOD) policy. The IT department needs the ability to erase corporate emails and sensitive company documents from a device if an employee leaves the company, while leaving the employee's personal data untouched. Which of the following features or security controls best achieves this capability?

  1. Containerization with selective wipeAnswer
  2. B
    Full device remote wipe
  3. C
    WPA2-Enterprise RADIUS authentication
  4. D
    Physical cable locks

Answer

Containerization with selective wipe
Containerization segregates corporate applications and data into a isolated, encrypted sandbox managed by Mobile Device Management (MDM). If an employee leaves the company or a device is decommissioned from BYOD use, administrators can perform a selective wipe, which deletes only the corporate container while leaving personal photos, text messages, and personal applications untouched.

Step-by-Step Solution

1
Identify the operational requirement
The requirement calls for removing company data from a personal device without disturbing the user's personal files.
BYOD policies require protecting enterprise data while maintaining employee privacy.
2
Evaluate mobile device management (MDM) features
Containerization isolates corporate applications and stored data into a dedicated, encrypted virtual boundary.
Separating business and personal data allows granular administrative control.
3
Determine the appropriate wipe procedure
A selective wipe targets only the corporate container, preserving all personal photos, apps, and settings.
Selective wipe satisfies both security and privacy constraints.

Key Concept

Mobile device containerization and selective wipe in BYOD deployment models
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic