Examkin

Question

Difficulty: EasyMobile Device and Embedded System Security

An IT technician is configuring security policies on corporate mobile devices issued to field workers. Which TWO of the following features should the technician enforce to directly protect sensitive data if a mobile device is lost or stolen?

  1. Remote wipe capability to sanitize device storage over the networkAnswer
  2. Full device encryption paired with a mandatory passcode lockAnswer
  3. C
    Storage containerization to separate personal media from corporate data
  4. D
    Pre-shared key WPA2-Personal authentication profiles

Answer

Enforcing remote wipe capability and full device encryption paired with a mandatory passcode lock.
Enforcing remote wipe allows administrators to send a signal to erase sensitive corporate information from a lost device. Full device encryption combined with a mandatory passcode lock secures data at rest so that even if an unauthorized user physically possesses the hardware, they cannot read the contents of the storage drive.

Step-by-Step Solution

1
Identify the primary threat presented in the scenario.
The threat is unauthorized access to sensitive corporate data on a physically lost or stolen mobile device.
Physical control of the device has been lost, exposing stored files.
2
Evaluate security controls that safeguard local data on missing hardware.
Full device encryption paired with a passcode prevents offline or local data extraction, while remote wipe allows sanitizing the drive if the device cannot be recovered.
These controls combine at-rest encryption and remotely triggered sanitization to prevent data exposure.

Key Concept

Mobile Security Controls for Lost or Stolen Hardware
Estimated Time:45s
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic