CAS-003 · Question #580
A company uses an application in its warehouse that works with several commercially available tablets and can only be accessed inside the warehouse. The support department would like the selection…
The correct answer is A. COPE with geofencing. COPE with geofencing satisfies all three requirements: company control over device models, allowance for personal media storage, and restriction of the application to within the warehouse.
Question
A company uses an application in its warehouse that works with several commercially available tablets and can only be accessed inside the warehouse. The support department would like the selection of tablets to be limited to three models to provide better support and ensure spares are on hand. Users often keep the tablets after they leave the department, as many of them store personal media items. Which of the following should the security engineer recommend to meet these requirements?
Options
- ACOPE with geofencing
- BBYOD with containerization
- CMDM with remote wipe
- DCYOD with VPN
How the community answered
(54 responses)- A69% (37)
- B9% (5)
- C4% (2)
- D19% (10)
Why each option
COPE with geofencing satisfies all three requirements: company control over device models, allowance for personal media storage, and restriction of the application to within the warehouse.
COPE (Corporate Owned, Personally Enabled) means the company purchases and controls which devices are provisioned, allowing it to limit the selection to the required three models while still permitting employees to store personal media. Geofencing uses GPS or network-based boundaries to restrict the warehouse application so it functions only within the physical perimeter of the warehouse, enforcing the location-based access requirement without relying on a VPN. Together these controls address device standardization, personal use allowance, and location-restricted access in one solution.
BYOD (Bring Your Own Device) means employees own the devices, so the organization cannot restrict selection to three specific models as required.
MDM with remote wipe can manage device inventory, but remote wipe would destroy the personal media items that users are permitted to store, violating the personal-use requirement.
CYOD (Choose Your Own Device) can limit device models, but VPN provides encrypted remote access rather than restricting application functionality to a specific physical location such as the warehouse.
Concept tested: COPE mobile strategy with geofencing for location-based access control
Source: https://csrc.nist.gov/publications/detail/sp/800-124/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.