mobile device which the Chief Information Officer (CIO) wants to immediately deploy to all employees in the company. The product is commercially available, runs a popular mobile operating system…

Question

Options

• AAbility to remotely wipe the devices, apply security controls remotely, and encrypt the SSD;
• BAbility to remotely administer the devices, apply security controls remotely, and remove the SSD;
• CAbility to remotely monitor the devices, remove security controls remotely, and decrypt the SSD;
• DAbility to remotely sanitize the devices, apply security controls locally, encrypt the SSD;

• A
  70% (16)
• B
  9% (2)
• C
  4% (1)
• D
  17% (4)

Explanation

For enterprise mobile device deployments, the three critical risk management capabilities are: (1) remote wipe-to erase sensitive data if a device is lost or stolen; (2) remote application of security controls-to enforce policies such as screen lock, encryption, and app restrictions via MDM (Mobile Device Management); and (3) SSD encryption-to protect data at rest in case of physical device compromise. Option B suggests 'removing the SSD,' which is impractical at scale. Option C mentions 'removing security controls remotely,' which is the opposite of sound security practice, and 'decrypting the SSD' increases risk rather than reducing it. Option D specifies applying security controls 'locally' rather than remotely, which defeats the purpose of centralized enterprise mobile management. Option A represents the correct and complete set of mobile risk mitigation factors.

No community discussion yet for this question.