CAS-003 · Question #817
An engineering team is developing and deploying a fleet of mobile devices to be used for specialized inventory management purposes. These devices should: - Be based on open-source Android for user…
The correct answer is A. Set an application wrapping policy, wrap the application, distributes the inventory APK via the. Application wrapping (A) is a Mobile Application Management (MAM) technique where security policies are applied to an existing app binary without modifying its source code. An MDM/MAM solution can wrap the inventory APK to enforce camera-only access by that specific app, block…
Question
An engineering team is developing and deploying a fleet of mobile devices to be used for specialized inventory management purposes. These devices should:
- Be based on open-source Android for user familiarity and ease.
- Provide a single application for inventory management of physical
assets.
- Permit use of the camera be only the inventory application for the
purposes of scanning
- Disallow any and all configuration baseline modifications.
- restrict all access to any device resource other than those required
for use of the inventory management application Which of the following approaches would best meet these security requirements?
Options
- ASet an application wrapping policy, wrap the application, distributes the inventory APK via the
- BWrite a MAC sepolicy that defines domains with rules, label the inventory application, build the
- CSwap out Android Linux kernel version for >2,4,0, but the internet build Android, remove
- DBuild and install an Android middleware policy with requirements added, copy the file into/
How the community answered
(21 responses)- A62% (13)
- B19% (4)
- C10% (2)
- D10% (2)
Explanation
Application wrapping (A) is a Mobile Application Management (MAM) technique where security policies are applied to an existing app binary without modifying its source code. An MDM/MAM solution can wrap the inventory APK to enforce camera-only access by that specific app, block configuration changes, and restrict device resources to only those needed by the inventory application. The wrapped APK is then distributed via an enterprise app store or MDM platform, keeping it off public channels. Writing a MAC SELinux policy (B) is technically viable but extremely complex, requiring custom ROM builds and kernel expertise far beyond typical enterprise deployment. Swapping the Linux kernel (C) is a non-standard, high-risk approach with no clear security benefit. An Android middleware policy (D) is not a standard, well-defined security mechanism for achieving these requirements. Application wrapping via MDM is the industry-standard approach for this use case.
Topics
Community Discussion
No community discussion yet for this question.