Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

An organization permits employees to access corporate email and proprietary internal applications on their personal mobile devices under a Bring Your Own Device (BYOD) policy. The IT security administrator must ensure that corporate data can be erased remotely if a device is lost or an employee departs, without destroying the employee's personal photos and files. Which of the following security controls BEST fulfills this requirement?

  1. ContainerizationAnswer
  2. B
    Full device remote wipe policy
  3. C
    WPA2-Personal authentication enforcement
  4. D
    Physical security cable locks

Answer

Containerization separates corporate data from personal data on mobile devices, allowing administrators to execute a selective wipe of business information while leaving personal files intact.
Containerization establishes an isolated, encrypted environment on personal devices specifically for corporate data and applications. Through MDM/MAM administration, IT teams can issue a selective wipe command that removes only the corporate container and its encrypted keys, preserving the user's personal media, personal apps, and configuration settings.

Step-by-Step Solution

1
Analyze the administrative goal and constraints
The administrator must enable remote wiping of corporate data on BYOD endpoints while preserving employee personal data.
BYOD security policies require balancing corporate data protection with employee privacy.
2
Evaluate technical features of mobile security controls
Containerization creates a logically separated, encrypted compartment for enterprise apps and storage on the smartphone.
This logical boundary allows Mobile Device Management (MDM) or Mobile Application Management (MAM) software to issue a selective wipe target limited strictly to the corporate container.
3
Select the optimal control
Containerization directly satisfies the requirement for selective data erasure.
Other options either perform an all-or-nothing factory reset or focus on unrelated physical and network transport security.

Key Concept

BYOD Security Controls and Mobile Containerization
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic