Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

A systems administrator is configuring endpoint security profiles for enterprise mobile devices and specialized embedded hardware. Which mobile and embedded security control correctly matches each operational requirement?

  • ContainerizationIsolates corporate applications and data into a encrypted sandbox on user-owned personal devices.
  • GeofencingRestricts device features or camera access automatically based on GPS or cellular position.
  • Selective WipeRemoves organizational accounts and proprietary files while leaving personal photos and data intact.
  • Network SegmentationPlaces legacy embedded IoT sensors onto an isolated VLAN away from corporate data traffic.

Answer

Containerization matches isolating corporate apps into an encrypted sandbox on personal endpoints. Geofencing matches restricting features based on GPS or location data. Selective wipe matches removing corporate files while preserving personal user data. Network segmentation matches placing legacy IoT sensors onto an isolated VLAN.
Containerization logically segregates enterprise software from personal data; Geofencing triggers location-based security policies via GPS or radio signals; Selective wipe targets company data for deletion without affecting user content; and Network segmentation isolates vulnerable embedded systems on segregated network zones.

Step-by-Step Solution

1
Identify the mechanism that segregates work content on personal devices.
Containerization creates a distinct secure workspace on BYOD endpoints.
Containerization ensures corporate data is segregated and encrypted separately from personal user content.
2
Identify the technology enforcing location-aware security restrictions.
Geofencing dynamically adjusts security options based on device coordinates.
Geofencing relies on location metrics (GPS/cellular) to apply site-specific rules.
3
Identify the command used to clean business records from departing employee endpoints.
Selective wipe removes managed enterprise assets while leaving personal assets unaffected.
MDM selective wipe actions target corporate containers without affecting user storage.
4
Identify the security approach suited for embedded or IoT hardware.
Network segmentation restricts embedded device network exposure.
Because IoT devices often lack endpoint antimalware agents, isolating them on separate VLANs prevents lateral threat movement.

Key Concept

Mobile Device and Embedded System Security Controls
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic