Examkin

Question

Difficulty: HardMobile Device and Embedded System Security

An IT security analyst is updating compliance documentation across corporate mobile endpoints and industrial IoT deployment sites. Match each security mechanism on the left with its corresponding technical objective or operational enforcement capability on the right.

  • Geofencing configurationTriggers context-aware security profile adjustments, such as disabling camera hardware when a device enters a secure physical location.
  • Mobile Application Management (MAM) containerizationIsolates managed enterprise app data from personal storage to allow a selective wipe without affecting personal files.
  • Embedded IoT system hardeningDisables unnecessary services, changes default administrative credentials, and restricts network traffic via isolated VLANs on micro-controller units.
  • Embedded Secure Element (eSE) hardware storageProvides a tamper-resistant hardware coprocessor dedicated to securely storing biometric templates and cryptographic encryption keys independently of the OS.

Answer

Geofencing configuration matches location-based trigger profile adjustments; MAM containerization matches enterprise app data isolation for selective wiping; Embedded IoT system hardening matches disabling unnecessary services and changing default credentials on micro-controllers; Embedded Secure Element hardware storage matches dedicated hardware coprocessor storage for cryptographic keys and biometrics.
Each concept correctly aligns with its core security objective: Geofencing automates policy changes using geographic location; MAM containerization segregates enterprise assets for targeted selective wiping; Embedded IoT system hardening mitigates vulnerability exposure on lightweight controllers by stripping default settings; and an Embedded Secure Element provides hardware-isolated cryptoprocessing.

Step-by-Step Solution

1
Analyze location-specific security enforcement features.
Identify that dynamic profile changes based on physical GPS coordinates define geofencing.
Geofencing uses positioning services to enforce security policies strictly within designated geographic boundaries.
2
Evaluate data protection strategies for BYOD environment app management.
Identify that isolating business data inside an encrypted sandbox for selective wipe matches MAM containerization.
Containerization separates work environments from personal data on mobile endpoints.
3
Examine device hardening steps unique to resource-constrained IoT/embedded hardware.
Identify that removing unneeded protocols, changing default passwords, and segmenting traffic via VLANs matches embedded IoT hardening.
Embedded systems often lack full OS security tools, requiring service reduction and credential management.
4
Review hardware-level root-of-trust components for mobile biometrics and encryption.
Identify that isolated tamper-proof chips for key and biometric storage match the embedded Secure Element (eSE).
Dedicated hardware coprocessors prevent key extraction even if the primary mobile OS is compromised.

Key Concept

Mobile Device and Embedded System Security
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic