Examkin

Question

Difficulty: HardMobile Device and Embedded System Security

An IT security administrator is establishing mobile endpoint and embedded system security policies for an enterprise organization. Match each operational security goal on the left with the correct policy control or technical implementation on the right.

  • Restricting mobile application functionality automatically when a device physically exits an authorized corporate facility campus.Geofencing
  • Encapsulating corporate apps and data on employee-owned (BYOD) devices to allow targeted removal without touching personal content.Containerization
  • Preventing unauthorized execution of unverified binaries on embedded industrial sensors that lack traditional antivirus software.Application Whitelisting
  • Verifying device OS patch state, encryption status, and root/jailbreak integrity before permitting a remote VPN connection.Posture Assessment

Answer

1. Restricting mobile application functionality based on physical perimeter location matches with Geofencing.
2. Encapsulating corporate apps and data on BYOD devices matches with Containerization.
3. Preventing unauthorized binary execution on embedded devices matches with Application Whitelisting.
4. Verifying device security health before granting VPN access matches with Posture Assessment.
Each requirement directly aligns with its specific technical implementation:
- Location-driven security enforcement uses Geofencing.
- Segmenting corporate data from personal storage on BYOD endpoints utilizes Containerization.
- Restricting execution on resource-constrained embedded systems relies on Application Whitelisting.
- Evaluating endpoint health before establishing connection tunnels requires Posture Assessment.

Step-by-Step Solution

1
Analyze location-based policy enforcement requirements for mobile devices.
Identify that using location services (GPS/cellular/Wi-Fi) to restrict app capabilities outside a physical boundary defines geofencing.
Geofencing dynamically alters device posture or application availability based on real-time location metrics.
2
Evaluate BYOD data isolation and selective wipe controls.
Identify containerization (MAM) as the technology designed to sandbox corporate assets from personal user storage.
Containerization ensures corporate privacy control while maintaining personal user privacy on non-corporate-owned hardware.
3
Determine execution control methods for embedded IoT hardware.
Match application whitelisting with embedded system binary execution control.
Embedded systems frequently lack compute resources for real-time signature antivirus scanning, making strict whitelisting the optimal default-deny mitigation.
4
Examine pre-connection health validation controls.
Associate checking patch levels and root status before VPN access with posture assessment.
Posture assessment ensures endpoints satisfy baseline health requirements prior to network connection authorization.

Key Concept

Mobile Device and Embedded System Security Controls
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic