An IT security technician is establishing mobile endpoint policies for corporate-issued smartphones used by remote staff. Which TWO of the following configurations should the technician enforce via Mobile Device Management (MDM) to protect stored sensitive data in the event of theft and prevent the execution of unvetted third-party software?
- Enable storage encryption and remote wipe capabilitiesCevap
- Disable application sideloading and restrict installation to trusted enterprise repositoriesCevap
- CApply physical privacy filters to prevent unauthorized wireless eavesdropping
- DConfigure WPA2-Personal pre-shared keys for all corporate mobile network traffic
Cevap
The technician should enable storage encryption with remote wipe capabilities and disable application sideloading to restrict installations to trusted repositories.
Enabling full storage encryption protects confidential data stored on mobile devices if stolen, while remote wipe allows security teams to erase data over the air. Restricting app installations by disabling sideloading ensures users cannot install potentially malicious unverified third-party software.
Adım Adım Çözüm
Anahtar Kavram
Mobile Device Management (MDM) Security Controls and Application Hardening
Tahmini Süre:1m 15s