nerdexam
CompTIA

CAS-003 · Question #580

A company uses an application in its warehouse that works with several commercially available tablets and can only be accessed inside the warehouse. The support department would like the selection…

The correct answer is A. COPE with geofencing. COPE with geofencing satisfies all three requirements: company control over device models, allowance for personal media storage, and restriction of the application to within the warehouse.

Technical Integration of Enterprise Security

Question

A company uses an application in its warehouse that works with several commercially available tablets and can only be accessed inside the warehouse. The support department would like the selection of tablets to be limited to three models to provide better support and ensure spares are on hand. Users often keep the tablets after they leave the department, as many of them store personal media items. Which of the following should the security engineer recommend to meet these requirements?

Options

  • ACOPE with geofencing
  • BBYOD with containerization
  • CMDM with remote wipe
  • DCYOD with VPN

How the community answered

(54 responses)
  • A
    69% (37)
  • B
    9% (5)
  • C
    4% (2)
  • D
    19% (10)

Why each option

COPE with geofencing satisfies all three requirements: company control over device models, allowance for personal media storage, and restriction of the application to within the warehouse.

ACOPE with geofencingCorrect

COPE (Corporate Owned, Personally Enabled) means the company purchases and controls which devices are provisioned, allowing it to limit the selection to the required three models while still permitting employees to store personal media. Geofencing uses GPS or network-based boundaries to restrict the warehouse application so it functions only within the physical perimeter of the warehouse, enforcing the location-based access requirement without relying on a VPN. Together these controls address device standardization, personal use allowance, and location-restricted access in one solution.

BBYOD with containerization

BYOD (Bring Your Own Device) means employees own the devices, so the organization cannot restrict selection to three specific models as required.

CMDM with remote wipe

MDM with remote wipe can manage device inventory, but remote wipe would destroy the personal media items that users are permitted to store, violating the personal-use requirement.

DCYOD with VPN

CYOD (Choose Your Own Device) can limit device models, but VPN provides encrypted remote access rather than restricting application functionality to a specific physical location such as the warehouse.

Concept tested: COPE mobile strategy with geofencing for location-based access control

Source: https://csrc.nist.gov/publications/detail/sp/800-124/rev-2/final

Topics

#COPE#geofencing#MDM#mobile device management

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice