An organization is implementing a COPE mobile device management policy. Which of the following should the organization include in the COPE policy? (Choose two.)

Question

Options

• ARemote wiping of the device
• BData encryption
• CRequiring passwords with eight characters
• DData usage caps
• EEmployee data ownership
• FPersonal application store access

• A
  77% (33)
• C
  5% (2)
• D
  2% (1)
• E
  2% (1)
• F
  14% (6)

Explanation

Remote wiping (A) and data encryption (B) are correct because COPE (Corporate-Owned, Personally-Enabled) means the organization owns the device - making it responsible for protecting corporate data. Remote wipe ensures sensitive data can be erased if the device is lost, stolen, or an employee is terminated, while data encryption protects stored and transmitted corporate data from unauthorized access. Both are core MDM security controls that any device owner must enforce.

Why the distractors fail:

• C (8-character passwords): Too implementation-specific and arbitrary - password policies may be included in MDM, but this detail doesn't define COPE.
• D (Data usage caps): More relevant to BYOD where employers reimburse bills; in COPE the org owns and pays for the plan outright.
• E (Employee data ownership): This is the opposite of COPE - the organization owns the device and its data; employee ownership describes BYOD.
• F (Personal app store access): Allowing personal apps is a feature of COPE, not a security policy requirement, and unmanaged apps can introduce risk.

Memory tip: COPE = Company Owns, Protects Everything - when the company holds title to the device, it must be able to wipe it and encrypt it. Those two controls follow directly from ownership.

No community discussion yet for this question.