Examkin

Question

Difficulty: HardMobile Device and Embedded System Security

A company is implementing a Bring Your Own Device (BYOD) policy for mobile sales representatives accessing corporate customer records. The security team requires a solution that isolates corporate data from personal data, prevents copy-paste functions between managed and unmanaged applications, and allows administrators to remove all corporate records upon employee departure without erasing personal photos or applications. Which of the following Mobile Device Management (MDM) and Mobile Application Management (MAM) configuration strategies should the systems administrator implement?

  1. Deploy Mobile Application Management (MAM) containerization with encrypted data vaults and selective wipe rules.Answer
  2. B
    Configure an automated remote full-device factory wipe policy triggered immediately upon user account revocation.
  3. C
    Implement perimeter geofencing rules to disable device storage access whenever the hardware leaves corporate facilities.
  4. D
    Enforce WPA3-Enterprise network profiles with 802.1X RADIUS authentication and local device passcode policies.

Answer

Deploy Mobile Application Management (MAM) containerization with encrypted data vaults and selective wipe rules.
Implementing MAM containerization creates an isolated, encrypted workspace on mobile endpoints. This architecture allows administrators to enforce Data Loss Prevention (DLP) controls (such as blocking copy-paste functions between corporate and personal applications) and perform a selective wipe that removes only corporate assets when an employee leaves the company.

Step-by-Step Solution

1
Analyze the technical requirements of the scenario.
Identified key constraints: storage isolation between corporate and personal apps, data loss prevention (preventing copy-paste leakage), and targeted data removal upon employee offboarding on BYOD hardware.
BYOD environments demand strict separation between corporate data and personal user data to maintain privacy while ensuring data protection.
2
Evaluate mobile security architectures against the requirements.
MAM containerization establishes a secure, encrypted boundary (container) for corporate applications, allowing administrators to restrict inter-app data sharing and perform a selective wipe.
Selective wipe targets only the enterprise containerized storage, leaving personal photos, apps, and OS settings completely unaffected.
3
Compare against incorrect alternative controls.
Full device wipes destroy personal data; geofencing does not restrict clipboard functions or partition storage; wireless encryption only protects network transport.
Only application containerization and selective wipe satisfy all BYOD compliance and management objectives.

Key Concept

Mobile Application Management (MAM) Containerization and Selective Wipe
Estimated Time:2m 0s
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic