An organization enables BYOD but wants to allow users to access the corporate email, calendar, and contacts from their devices. The data associated with the user's accounts is sensitive, and therefore, the organization wants to comply with the following requirements:

Active full-device encryption Enabled remote-device wipe Blocking unsigned applications Containerization of email, calendar, and contacts Which of the following technical controls would BEST protect the data from attack or loss and meet the above requirements?

Question

An organization enables BYOD but wants to allow users to access the corporate email, calendar, and contacts from their devices. The data associated with the user's accounts is sensitive, and therefore, the organization wants to comply with the following requirements:

Active full-device encryption Enabled remote-device wipe Blocking unsigned applications Containerization of email, calendar, and contacts Which of the following technical controls would BEST protect the data from attack or loss and meet the above requirements?

Accepted Answer

D. Configure and monitor devices with an MDM. An MDM (Mobile Device Management) solution enforces full-device encryption at the OS level, enables remote wipe of enrolled devices, restricts installation of unsigned or unapproved applications through policy, and deploys containerized profiles for corporate email, calendar, and contacts - satisfying all four requirements in a unified, auditable platform.

Answer

A. Require frequent password changes and disable NFC. Frequent password changes and disabling NFC are minor hardening measures that do not enforce encryption, provide remote wipe, block unsigned apps, or enable containerization of corporate data.

Answer

B. Enforce device encryption and activate MAM. Enforcing device encryption combined with MAM (Mobile Application Management) addresses app-level sandboxing but MAM alone does not provide full-device remote wipe or enforce OS-level full-device encryption the way MDM does.

Answer

C. Install a mobile antivirus application. A mobile antivirus application detects and removes malware but cannot enforce encryption, execute remote wipe, block unsigned applications, or provide containerization of corporate accounts.

An organization enables BYOD but wants to allow users to access the corporate email, calendar, and contacts from their devices. The data associated with the user's accounts is sensitive, and…

Question

Options

How the community answered

Why each option

Topics

Community Discussion