Question

Difficulty: HardMobile Device and Embedded System Security

During a routine audit at a logistics warehouse, an IT technician discovers that several staff members have downloaded unapproved third-party game packages directly from web browsers onto their corporate-managed handheld scanning devices. The devices run a customized embedded Android operating system and connect to an isolated warehouse subnet. The systems administrator needs to prevent users from installing unauthorized application packages (sideloading) while ensuring IT can still push central software updates remotely. Which of the following configurations should the administrator enforce via the Mobile Device Management (MDM) console to resolve this security risk?

  1. Enforce a restriction policy that blocks application installation from unknown sources across all managed devices.Answer
  2. B
    Configure an automated remote wipe policy that executes when a device experiences multiple failed passcode attempts.
  3. C
    Reconfigure the warehouse wireless access points to use WPA2-Personal pre-shared keys paired with static MAC filtering.
  4. D
    Attach tamper-evident cable locks and physical security seals to all handheld charging cradles in the facility.

Answer

Enforce a restriction policy that blocks application installation from unknown sources across all managed devices.
The correct answer is to enforce a restriction policy blocking application installation from unknown sources. On mobile and embedded Android platforms, downloading and executing application packages directly from web browsers is known as sideloading. Pushing an MDM policy that disables 'unknown sources' prevents end-users from installing unvetted third-party software, while preserving the administrator's ability to push approved enterprise applications.

Step-by-Step Solution

1
Analyze the threat vector identified in the scenario.
The issue involves users manually downloading and executing unverified package files directly from web browsers onto embedded mobile OS devices.
Installing apps outside trusted enterprise channels (sideloading) introduces severe malware risks.
2
Evaluate MDM control policies designed for application security.
Disabling installation from unknown sources specifically targets sideloading without obstructing pushed updates from managed enterprise repositories.
Mobile Device Management solutions allow granular policy enforcement restricting user-driven package installation.
3
Confirm the administrative resolution.
Applying the unknown sources restriction policy effectively resolves the unauthorized application risk.
This directly remediates the root security vulnerability without impacting operational workflow updates.

Key Concept

MDM Application Control and Sideloading Prevention
Estimated Time:1m 30s
Rate this question