A security engineer wants to propose an MDM solution to mitigate certain risks. The MDM solution should meet the following requirements: - Mobile devices should be disabled if they leave the trusted…

Geofencing allows the MDM solution to define geographical boundaries (trusted zones) and enforce policies, such as disabling access to corporate resources or locking the device, when a device leaves these designated areas. This directly addresses the requirement for devices to be disabled if they leave a trusted zone.

Patch management keeps devices updated but does not directly address disabling devices based on location or preventing data access on lost devices.

Containerization separates corporate data from personal data, which is good for data protection, but it doesn't disable the device based on location or encrypt the entire device to prevent all data access on a lost device.

Full disk encryption (FDE) ensures that all data stored on the mobile device is encrypted. If the device is lost, an unauthorized person cannot access the data without the proper decryption key, thereby meeting the requirement that data is not accessible on a lost device.

Allow/blocklists control which applications can be installed or run, which is a security control but does not address the location-based disabling or data inaccessibility on lost devices.

Geotagging adds location information to data (like photos) but is not a security control for device access or data protection for lost devices.