Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

A systems administrator is establishing security profiles for personal smartphones enrolled in an enterprise Bring Your Own Device (BYOD) deployment. The policy must ensure that corporate data is isolated so it can be wiped independently of personal files, and it must prevent users from installing unverified software from unauthorized third-party sources. Which TWO of the following configurations or controls should the administrator enforce?

  1. Deploy application containerization for corporate storage and apps.Answer
  2. Configure Mobile Device Management (MDM) policies to prohibit application sideloading.Answer
  3. C
    Enforce a mandatory full-device remote wipe trigger after three invalid passcode attempts.
  4. D
    Implement MAC address filtering on local wireless access points to restrict app execution.

Answer

Deploying application containerization and prohibiting application sideloading via MDM policies.
Application containerization isolates enterprise applications and data into a secure partition, permitting selective remote wipes while preserving personal user data on BYOD devices. Disabling sideloading prevents users from installing unvetted applications from third-party sources outside official app stores.

Step-by-Step Solution

1
Identify requirement for protecting personal data while allowing corporate data removal.
Containerization isolates business applications and storage from personal storage, enabling selective wipes.
Full-device wipes destroy personal user files, whereas containerization allows surgical removal of corporate assets.
2
Identify requirement for preventing unverified app installations.
Disabling sideloading forces devices to obtain applications solely through managed or trusted store repositories.
Sideloading bypasses security vetting mechanisms inherent in official app distribution platforms.

Key Concept

BYOD Mobile Containerization and Sideloading Protection
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic