An IT security administrator is auditing endpoint compliance and hardening policies across corporate-issued mobile devices and legacy embedded infrastructure. Match each mobile or embedded security implementation on the left to its correct operational objective on the right.
- GeofencingRestricts feature availability or access controls based on the physical location coordinates of the mobile endpoint.
- ContainerizationSegregates enterprise apps and corporate data from personal data on an employee-owned mobile device.
- Selective WipeRemoves corporate profiles, cryptographic keys, and managed data from a BYOD device without affecting personal photos or files.
- Embedded System MicrosegmentationPlaces legacy IoT/embedded devices with unpatchable firmware onto an isolated network segment to mitigate lateral threat movement.
Answer
Geofencing matches with restricting features based on physical location; Containerization matches with segregating enterprise apps from personal data; Selective Wipe matches with removing corporate assets without touching personal data; Embedded System Microsegmentation matches with placing unpatchable legacy IoT devices on isolated network segments.
Each security control directly fulfills its designated administrative objective: Geofencing manages location-based access; Containerization ensures logical data separation for BYOD endpoints; Selective Wipe sanitizes corporate data without destroying personal content; Microsegmentation protects corporate networks from unpatchable embedded devices.
Step-by-Step Solution
Key Concept
Mobile Endpoint and Embedded System Security Control Enforcement