Examkin

Question

Difficulty: MediumTroubleshooting Mobile OS Security and Connectivity Issues

A corporate mobile user reports receiving frequent untrusted root certificate warnings while connected to external networks. Shortly after, security alerts indicate unauthorized login attempts on the user's corporate Single Sign-On (SSO) account. A technician inspects the mobile device and discovers an unapproved custom VPN configuration profile routing all encrypted traffic through a rogue proxy server. Which of the following is the BEST sequence of actions to resolve the security compromise and protect corporate data?

  1. Remove the untrusted VPN profile, reset the user's SSO credentials, and re-enroll the device in the Mobile Device Management (MDM) portal.Answer
  2. B
    Update the cellular Access Point Name (APN) settings on the device to switch network routing away from the carrier.
  3. C
    Reconfigure the public wireless network router to force WPA3-Enterprise authentication for all connected clients.
  4. D
    Perform a soft reset on the mobile phone and clear the cached history of the native web browser.

Answer

Remove the untrusted VPN profile, reset the user's SSO credentials, and re-enroll the device in the Mobile Device Management (MDM) portal.
The correct response addresses both the root cause on the device (the malicious VPN profile intercepting traffic) and the secondary impact (compromised corporate account credentials). Removing the profile halts unauthorized traffic redirection, resetting credentials revokes compromised access, and MDM re-enrollment restores enforced security baselines.

Step-by-Step Solution

1
Identify and remove the unauthorized configuration profile.
Stops malicious traffic interception and prevents further MITM (Man-in-the-Middle) credential harvesting.
Rogue VPN profiles alter system network routing, forcing data through attacker-controlled proxies.
2
Reset user Single Sign-On (SSO) credentials immediately.
Invalidates stolen session tokens and passwords stored or captured by the rogue proxy.
Prevents attacker from utilizing already-harvested user credentials to access corporate resources.
3
Re-enroll the device into enterprise Mobile Device Management (MDM).
Restores baseline security compliance, trusted certificate authorities, and corporate restrictions.
Ensures unapproved profiles cannot easily be reinstalled and ensures policy compliance.

Key Concept

Mobile OS Security and Malicious Profile Remediation
Estimated Time:1m 30s
Rate this question

Topics

Troubleshooting Mobile OS Security and Connectivity Issues

More questions from this topic