312-50V12 Question #157: Real Exam Question with Answer & Explanation

Question

You are a cybersecurity consultant for a global organization. The organization has adopted a Bring Your Own Device (BYOD)policy, but they have recently experienced a phishing incident where an employee's device was compromised. In the investigation, you discovered that the phishing attack occurred through a third-party email app that the employee had installed. Given the need to balance security and user autonomy under the BYOD policy, how should the organization mitigate the risk of such incidents? Moreover, consider a measure that would prevent similar attacks without overly restricting the use of personal devices.

Options

• AProvide employees with corporate-owned devices for work-related tasks.
• BRequire all employee devices to use a company-provided VPN for internet access.
• CImplement a mobile device management solution that restricts the installation of non-approved
• DConduct regular cybersecurity awareness training, focusing on phishing attacks.