A policy has been established requiring users to install mobile device management (MDM) software on their personal devices. Which of the following would BEST mitigate the risk created by…

Question

Options

• AIssuing company-configured devices to users
• BRequiring users to sign off on terms and conditions for device usage
• CPreventing noncompliant devices from accessing the corporate network
• DIssuing warnings and documenting noncompliance

• A
  3% (1)
• B
  16% (6)
• C
  74% (28)
• D
  8% (3)

Explanation

Blocking noncompliant devices from accessing the corporate network directly eliminates the security risk - if an unmanaged device can't connect, it can't expose sensitive data or introduce malware, which is the actual threat MDM is designed to address. Option A reduces the problem by issuing managed devices, but it doesn't mitigate risk from personal devices that still exist and may access corporate resources. Option B (signing terms and conditions) is a legal/administrative control that creates accountability but does nothing to stop a noncompliant device from connecting. Option D (warnings and documentation) is reactive and purely administrative - it documents the problem rather than preventing harm.

Memory tip: Think "mitigate the risk" - only a technical control that actively blocks access neutralizes the threat. Policy acknowledgments and warnings address behavior, not the vulnerability itself.

No community discussion yet for this question.