nerdexam
CompTIA

CAS-003 · Question #818

A company's employees are not permitted to access company systems while traveling internationally. The company email system is configured to block logins based on geographic location, but some…

The correct answer is C. VPN on the mobile device F. Disabled GPS on mobile devices. The company's email geo-blocking works by checking the geographic location of the connecting device or IP address. Two conditions can bypass this: (C) A VPN on the mobile device tunnels all traffic through a server in an allowed region, making the connection appear to originate…

Enterprise Security Operations

Question

A company's employees are not permitted to access company systems while traveling internationally. The company email system is configured to block logins based on geographic location, but some employees report their mobile phones continue to sync email traveling. Which of the following is the MOST likely explanation? (Select TWO.)

Options

  • AOutdated escalation attack
  • BPrivilege escalation attack
  • CVPN on the mobile device
  • DUnrestricted email administrator accounts
  • EChief use of UDP protocols
  • FDisabled GPS on mobile devices

How the community answered

(40 responses)
  • A
    13% (5)
  • B
    5% (2)
  • C
    75% (30)
  • D
    3% (1)
  • E
    5% (2)

Explanation

The company's email geo-blocking works by checking the geographic location of the connecting device or IP address. Two conditions can bypass this: (C) A VPN on the mobile device tunnels all traffic through a server in an allowed region, making the connection appear to originate from an approved location - the geo-block sees a domestic IP and permits the sync. (F) Disabled GPS means the device cannot report its true physical location; if the system relies on device-reported GPS coordinates rather than IP geolocation, a device with GPS disabled may fall back to a default or unrecognized location that bypasses the block. Privilege escalation (B) is unrelated to geo-location bypass. Outdated escalation (A) is not a real attack category. UDP protocols (E) are irrelevant to email authentication/location checks. Unrestricted admin accounts (D) would not explain why standard employee devices continue syncing.

Topics

#geolocation blocking#VPN bypass#mobile email security#GPS spoofing

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice