Examkin

Soru

Zorluk: Çok zorMobile Device and Embedded System Security

A systems administrator is configuring security controls for field technicians who use corporate-issued mobile endpoints to monitor isolated embedded SCADA controllers at remote infrastructure sites. The mobile devices access enterprise cloud resources via cellular networks while concurrently communicating with the embedded IoT devices over local wireless links. Which TWO of the following security configurations should the administrator implement to best protect both the mobile endpoints and the embedded systems?

  1. Enforce mobile application management (MAM) containerization to isolate enterprise data from local network interface traffic.Cevap
  2. Mandate cryptographically signed firmware verification and disable unneeded physical and wireless ports on the embedded controllers.Cevap
  3. C
    Configure an automated policy to initiate a full factory remote wipe after three consecutive failed passcode attempts on the mobile endpoints.
  4. D
    Establish local Wi-Fi connectivity for the embedded controllers using WPA2-Personal with TKIP encryption to ensure legacy hardware compatibility.

Cevap

Enforcing MAM containerization on mobile endpoints and mandating cryptographically signed firmware with disabled unneeded ports on embedded controllers.
Mobile application management (MAM) containerization ensures corporate data remains isolated in an encrypted sandbox on mobile devices, protecting sensitive enterprise information when communicating over local short-range links. Simultaneously, embedded IoT devices require attack surface reduction—achieved by shutting down unnecessary physical/wireless ports—and protection against malicious firmware updates via cryptographically signed firmware enforcement.

Adım Adım Çözüm

1
Evaluate mobile endpoint data protection requirements when operating across dual networks.
Identified that corporate data must be logically separated from local wireless interfaces accessing embedded hardware.
MAM containerization encapsulates enterprise apps and data in an encrypted volume, preventing data leakage across unauthorized local connections.
2
Evaluate hardening controls required for resource-constrained embedded SCADA/IoT devices.
Identified reducing attack surfaces and preventing unauthorized firmware modifications.
Disabling unused ports eliminates unused entry points, and cryptographically signed firmware prevents malicious code execution.
3
Analyze proposed MDM passcode wipe policies and wireless security protocols for flawed implementations.
Rejected excessive local wipe thresholds and deprecated TKIP encryption settings.
A 3-attempt wipe threshold creates operational disruption, while TKIP is computationally weak and vulnerable to exploitation.

Anahtar Kavram

Mobile App Containerization and Embedded System Hardening Controls
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Mobile Device and Embedded System Security

Bu konudan daha fazla soru