A technician is configuring security options on the mobile device manager for users who often utilize public Internet connections while travelling. After ensuring that full disk encryption is enabled,

Encrypting device backups protects data at rest in backup storage but does not address the threat of network interception or device theft while using public connections.

USB OTG (On-The-Go) is a cable connection standard for transferring data between mobile devices; it has no relevance to securing connections over public internet.

Configuring remote wipe ensures that if a device is lost or stolen while traveling - a heightened risk when using public networks - the security team can immediately erase all corporate and personal data, preventing unauthorized access to sensitive information.

Restricting long-distance calls is a cost-control measure unrelated to protecting data confidentiality or device security on public networks.

An always-on VPN ensures that all network traffic from the mobile device is tunneled through the corporate security stack regardless of what network the user connects to, protecting data in transit from interception on untrusted public Wi-Fi or cellular networks.