Question

Difficulty: MediumMobile Device and Embedded System Security

An IT technician is provisioning corporate mobile tablets for field delivery drivers. The organization requires the tablets to lock down user interaction so drivers can only run a proprietary navigation app, while completely blocking access to device settings, web browsers, and third-party app installations. Which Mobile Device Management (MDM) configuration should the technician apply?

  1. Enable Single-App Kiosk Mode combined with mandatory application whitelistingAnswer
  2. B
    Provision a BYOD containerization profile with selective wipe capabilities
  3. C
    Configure WPA3-Enterprise 802.1X network authentication profiles
  4. D
    Install physical security cable locks and biometric thumbprint scanners

Answer

Enable Single-App Kiosk Mode combined with mandatory application whitelisting
Single-App Kiosk mode pins the mobile operating system to a single predefined app, disabling access to the home screen, status bar, device settings, and other applications. Application whitelisting ensures that only explicitly approved applications are permitted to execute on the platform.

Step-by-Step Solution

1
Identify the operational requirement for dedicated device deployment.
The requirement mandates that the mobile device run exclusively one application while preventing OS navigation, settings modifications, or installing unapproved apps.
Dedicated single-purpose hardware requires full system lock-down controls.
2
Evaluate MDM policy types designed for restricted single-purpose use.
Single-App Kiosk mode locks the OS interface directly into the designated application, while app whitelisting prevents any unauthorized executables from running.
Kiosk mode combined with whitelisting directly addresses the requirement to restrict device access exclusively to the specified application.

Key Concept

Mobile Device Kiosk Mode and Application Whitelisting
Estimated Time:1m 15s
Rate this question