Examkin

Question

Difficulty: HardMobile Device and Embedded System Security

A system administrator is hardening corporate-issued smart Point-of-Sale (PoS) handheld devices running an embedded operating system used by field merchants. The devices process sensitive customer payment data, are frequently operated in public venues, and are at high risk of physical theft or untrusted app installation. Which TWO of the following security measures should the administrator enforce on these embedded endpoints to mitigate these risks?

  1. Disable sideloading and restrict application execution exclusively to cryptographically signed corporate app repositories.Answer
  2. Enable full-device storage encryption paired with a remote wipe policy managed through a Mobile Device Management (MDM) profile.Answer
  3. C
    Configure the endpoints to connect to corporate networks using WPA2-Personal pre-shared keys rather than 802.1X enterprise authentication.
  4. D
    Grant local administrator privileges to merchants so they can bypass operating system security updates during high-volume business hours.

Answer

The correct measures are restricting application installation by disabling sideloading and enforcing full-device storage encryption combined with MDM remote wipe capabilities.
Disabling sideloading ensures that unverified or untrusted third-party software packages cannot be installed on embedded payment terminals, reducing malware exposure. Enforcing full-device storage encryption together with MDM remote wipe functionality secures sensitive local payment data at rest and provides immediate remote remediation should a device be stolen or lost in the field.

Step-by-Step Solution

1
Analyze the operational risks associated with embedded PoS handheld devices in public environments.
Primary threat vectors identified: unauthorized software execution (sideloading) and physical device theft causing data at rest exposure.
Embedded payment endpoints operated in public require strict control over app execution sources and robust protection for local storage.
2
Evaluate controls to prevent malicious software execution on embedded endpoints.
Disabling sideloading ensures only verified, signed software from corporate-approved repositories can be installed.
Sideloading bypasses store vetting processes and is a major vector for mobile malware infections.
3
Evaluate controls for physical theft and loss of mobile devices.
Full-device storage encryption protects data at rest, and MDM-driven remote wipe allows sanitizing compromised endpoints remotely.
Hardware stolen in the field remains unreadable without encryption keys, and remote wiping prevents persistent data exposure.

Key Concept

Mobile Device and Embedded System Security Enforcement
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic