During a routine audit at a logistics warehouse, an IT technician discovers that several staff members have downloaded unapproved third-party game packages directly from web browsers onto their corporate-managed handheld scanning devices. The devices run a customized embedded Android operating system and connect to an isolated warehouse subnet. The systems administrator needs to prevent users from installing unauthorized application packages (sideloading) while ensuring IT can still push central software updates remotely. Which of the following configurations should the administrator enforce via the Mobile Device Management (MDM) console to resolve this security risk?
- Enforce a restriction policy that blocks application installation from unknown sources across all managed devices.Answer
- BConfigure an automated remote wipe policy that executes when a device experiences multiple failed passcode attempts.
- CReconfigure the warehouse wireless access points to use WPA2-Personal pre-shared keys paired with static MAC filtering.
- DAttach tamper-evident cable locks and physical security seals to all handheld charging cradles in the facility.
Answer
Enforce a restriction policy that blocks application installation from unknown sources across all managed devices.
The correct answer is to enforce a restriction policy blocking application installation from unknown sources. On mobile and embedded Android platforms, downloading and executing application packages directly from web browsers is known as sideloading. Pushing an MDM policy that disables 'unknown sources' prevents end-users from installing unvetted third-party software, while preserving the administrator's ability to push approved enterprise applications.
Step-by-Step Solution
Key Concept
MDM Application Control and Sideloading Prevention
Estimated Time:1m 30s