Which of the following is the MOST appropriate control measure for lost mobile devices?

Question

Options

• ADisable unnecessary wireless interfaces such as Bluetooth.
• BReduce the amount of sensitive data stored on the device.
• CRequire authentication before access is given to the device.
• DRequire that the compromised devices be remotely wiped.

• A
  3% (1)
• B
  3% (1)
• D
  94% (33)

Explanation

Remote wiping (D) is the most appropriate control because it directly responds to the scenario of a lost device by rendering the data irretrievable, regardless of who possesses the device. Requiring authentication (C) and reducing sensitive data stored (B) are valuable preventive controls, but once a device is lost, these controls only slow down an attacker - they do not eliminate the threat. Disabling Bluetooth (A) is a hardening measure to reduce the attack surface while the device is in use, but it has no effect after the device is lost. The question asks for the control most appropriate for the event of loss, making remote wipe the only option that directly neutralizes the risk posed by a device that is no longer under organizational control.

No community discussion yet for this question.