Question

Difficulty: EasyTroubleshooting Mobile OS Security and Connectivity Issues

A corporate smartphone was reported lost in a public location and contains confidential company data. Place the standard mobile device security remediation steps in the correct order from FIRST action to LAST action.

  1. 1Perform a remote lock on the mobile device via the MDM console to prevent local access.
  2. 2Issue a remote wipe command to erase corporate data if the device cannot be located.
  3. 3Revoke active authentication tokens and reset the user's account password.
  4. 4Unenroll the lost device record from the enterprise Mobile Device Management (MDM) portal.

Answer

The correct order of actions is: 1) Perform a remote lock on the mobile device via the MDM console, 2) Issue a remote wipe command to erase corporate data, 3) Revoke active authentication tokens and reset the user's account password, 4) Unenroll the lost device record from the enterprise MDM portal.
When responding to a lost corporate mobile device, technicians must prioritize containment by locking the device, followed by data destruction (remote wipe), identity protection (password/token reset), and administrative portal maintenance (MDM unenrollment).

Step-by-Step Solution

1
Locate the device in the Mobile Device Management (MDM) portal and issue a remote lock command.
The screen locks immediately, preventing unauthorized local access while location tracking is assessed.
Immediate containment is necessary to secure corporate information.
2
Execute a remote wipe command through the MDM system.
All company and personal data on the device is securely erased.
If physical recovery is doubtful, wiping prevents data breaches.
3
Reset user domain credentials and revoke OAuth/session tokens associated with the mobile device.
The user's corporate email, VPN, and cloud access tokens become invalid for any unauthorized handler of the device.
Token revocation secures enterprise cloud resources connected to the account.
4
Unenroll and remove the device entry from the MDM directory.
The asset inventory is accurately updated and the hardware lifecycle for that device instance is closed.
Administrative cleanup prevents obsolete devices from clogging management portals.

Key Concept

Mobile Device Security Incident Response
Estimated Time:1m 0s
Rate this question