SY0-501 Question #408: Real Exam Question with Answer & Explanation

Question

A company is allowing a BYOD policy for its staff. Which of the following is a best practice that can decrease the risk of users jailbreaking mobile devices?

Options

• AInstall a corporately monitored mobile antivirus on the devices.
• BPrevent the installation of applications from a third-party application store.
• CBuild a custom ROM that can prevent jailbreaking.
• DRequire applications to be digitally signed.

Explanation

Installing and monitoring mobile antivirus on BYOD devices allows for the detection of jailbroken devices, enabling organizations to enforce policies and mitigate associated security risks.

Common mistakes.

• B. Preventing third-party app installations is a security measure often circumvented by jailbreaking, but it does not prevent the act of jailbreaking itself, which grants users root access to bypass such restrictions.
• C. Building custom ROMs is not a practical or enforceable solution for a BYOD policy, as companies cannot dictate operating system modifications on personal devices.
• D. Requiring digitally signed applications ensures app integrity but does not prevent users from jailbreaking their devices to bypass signature checks or install unsigned software.

Concept tested. BYOD Mobile Device Security and Risk Mitigation

Reference. https://learn.microsoft.com/en-us/mem/intune/protect/mobile-threat-defense

No community discussion yet for this question.