A user's mobile phone has become sluggish. A systems administrator discovered several malicious applications on the device and reset the phone. The administrator installed MDM software. Which of the f

Preventing a device root, or jailbreaking, stops users from gaining privileged control over the operating system, which is a common prerequisite for malicious apps to deeply compromise the device and bypass security controls. MDM software often includes features to detect and prevent rooted devices from accessing corporate resources or to wipe them if rooted.

Disabling biometric authentication would reduce convenience without directly preventing malicious application installation; in fact, it might decrease overall device security by making it easier for an unauthorized person to access a lost or stolen device if a weaker authentication method is used.

While requiring a PIN on the unlock screen is a good security practice, it primarily protects against unauthorized physical access to the device and does not directly prevent the installation or execution of malicious applications.

Enabling developer mode often relaxes security settings and allows for advanced debugging and sideloading, which would increase the device's vulnerability to malicious applications, directly opposing the goal of securing the device.

Blocking third-party application installations means restricting app sources to official app stores (like Google Play Store or Apple App Store), significantly reducing the risk of installing malicious software from untrusted sources. MDM solutions allow administrators to enforce this policy, preventing users from sideloading potentially harmful applications.

Preventing GPS spoofing addresses location-based attacks but does not directly prevent the installation of malicious applications that caused the initial sluggishness.