An engineer maintains a corporate-owned mobility infrastructure, and the organization requires that all web browsing using corporate-owned resources be monitored. Which of the following would allow…

Question

Options

• AExempt mobile devices from the requirement, as this will lead to privacy violations
• BConfigure the devices to use an always-on IPSec VPN
• CConfigure all management traffic to be tunneled into the enterprise via TLS
• DImplement a VDI solution and deploy supporting client apps to devices
• ERestrict application permissions to establish only HTTPS connections outside of the enterprise

• A
  4% (1)
• B
  74% (17)
• C
  9% (2)
• D
  13% (3)

Explanation

NOTE: The listed correct answers (B and E) appear partially incorrect. B (always-on IPSec VPN) is correct: it forces all device traffic - including web browsing - to tunnel through the corporate network, where it can be inspected and logged. This is a well-established method for monitoring mobile device traffic. However, E (restrict application permissions to HTTPS-only connections) does not enable monitoring - it enforces encrypted connections to the internet, which actually makes traffic harder to inspect without dedicated SSL/TLS inspection infrastructure. Restricting to HTTPS improves confidentiality but provides no visibility into browsing content or destinations on its own. The correct second answer should be D (VDI): a Virtual Desktop Infrastructure solution means all web browsing is performed on corporate servers rather than on the device itself, making it inherently visible and monitorable by the organization. The correct answers should be B and D.

No community discussion yet for this question.