CAS-003 · Question #9
A newly hired systems administrator is trying to connect a new and fully updated, but very customized, Android device to access corporate resources. However, the MDM enrollment process continually…
The correct answer is D. The device is rooted. A rooted Android device bypasses the OS security model, causing MDM solutions to reject enrollment because the device cannot be trusted to enforce corporate security policies.
Question
A newly hired systems administrator is trying to connect a new and fully updated, but very customized, Android device to access corporate resources. However, the MDM enrollment process continually fails. The administrator asks a security team member to look into the issue. Which of the following is the MOST likely reason the MDM is not allowing enrollment?
Options
- AThe OS version is not compatible
- BThe OEM is prohibited
- CThe device does not support FDE
- DThe device is rooted
How the community answered
(14 responses)- A7% (1)
- C7% (1)
- D86% (12)
Why each option
A rooted Android device bypasses the OS security model, causing MDM solutions to reject enrollment because the device cannot be trusted to enforce corporate security policies.
The question states the device is fully updated, making an incompatible OS version an unlikely cause.
OEM restrictions are possible but are a less common MDM policy compared to the near-universal enforcement against rooted devices.
Modern Android devices support full-disk encryption natively, and a customized but updated device would still include this capability.
Rooting an Android device removes the manufacturer and OS vendor security boundaries, granting unrestricted superuser access that undermines the MDM's ability to enforce policies such as containerization, remote wipe, and encryption enforcement. Enterprise MDM platforms detect root status and block enrollment by design to prevent the corporate environment from being exposed on an untrustworthy device.
Concept tested: MDM enrollment blocking rooted Android devices
Source: https://developers.google.com/android/work/requirements
Topics
Community Discussion
No community discussion yet for this question.