CAS-001 · Question #246
The increasing complexity of attacks on corporate networks is a direct result of more and more corporate employees connecting to corporate networks with mobile and personal devices. In most cases…
The correct answer is C. Risks: Data exfiltration, loss of data via stolen mobile devices, increased data leakage at the network edge. The correct answer is C. The realistic risks of BYOD and mobile device proliferation include data exfiltration (employees sending corporate data via personal apps), loss of corporate data when mobile devices are stolen or lost, and an expanded attack surface at the network edge…
Question
The increasing complexity of attacks on corporate networks is a direct result of more and more corporate employees connecting to corporate networks with mobile and personal devices. In most cases simply banning these connections and devices is not practical because they support necessary business needs. Which of the following are typical risks and mitigations associated with this new trend?
Options
- ARisks: Data leakage, lost data on destroyed mobile devices, smaller network attack surface, prohibitive
- BRisks: Confidentiality leaks through cell conversations, availability of remote corporate data, integrity
- CRisks: Data exfiltration, loss of data via stolen mobile devices, increased data leakage at the network edge
- DRisks: Theft of mobile devices, unsanctioned applications, minimal device storage, call quality Mitigations:
How the community answered
(36 responses)- A3% (1)
- B11% (4)
- C81% (29)
- D6% (2)
Explanation
The correct answer is C. The realistic risks of BYOD and mobile device proliferation include data exfiltration (employees sending corporate data via personal apps), loss of corporate data when mobile devices are stolen or lost, and an expanded attack surface at the network edge where personal devices connect. Appropriate mitigations include Mobile Device Management (MDM), remote wipe capabilities, data loss prevention (DLP) tools, and network access control (NAC). Option A incorrectly states BYOD reduces the attack surface - it expands it. Option B conflates unrelated risks. Option D lists minor inconveniences (storage, call quality) rather than meaningful security threats.
Topics
Community Discussion
No community discussion yet for this question.