nerdexam
(ISC)2

CISSP · Question #724

Management has decided that a core application will be used on personal cellular phones. As an implementation requirement, regularly scheduled analysis of the security posture needs to be conducted. M

The correct answer is A. Strict integration of application management, configuration management (CM), and phone. When a core application runs on personal cellular phones, continuous monitoring and regular security‑posture analysis require a coordinated framework across: Application management (how the app is deployed, updated, and secured). Configuration management (CM) (ensuring devices an

Submitted by hassan_iq· Mar 5, 2026Security Operations

Question

Management has decided that a core application will be used on personal cellular phones. As an implementation requirement, regularly scheduled analysis of the security posture needs to be conducted. Management has also directed that continuous monitoring be implemented. Which of the following is required to accomplish management's directive?

Options

  • AStrict integration of application management, configuration management (CM), and phone
  • BManagement application installed on user phones that tracks all application events and cellular
  • CEnterprise-level security information and event management (SIEM) dashboard that provides full
  • DRoutine reports generated by the user's cellular phone provider that detail security events

How the community answered

(45 responses)
  • A
    60% (27)
  • B
    7% (3)
  • C
    11% (5)
  • D
    22% (10)

Explanation

When a core application runs on personal cellular phones, continuous monitoring and regular security‑posture analysis require a coordinated framework across: Application management (how the app is deployed, updated, and secured). Configuration management (CM) (ensuring devices and app settings comply with security Phone management (via a mobile device management [MDM] or unified endpoint management [UEM] platform that can enforce policies, detect anomalies, and respond to incidents). Only tight integration of these three areas can provide the regular analysis and continuous monitoring that management has directed.

Topics

#continuous monitoring#mobile device management#configuration management#security operations

Community Discussion

No community discussion yet for this question.

Full CISSP Practice