Practice: Mobile and Embedded Device Security

A user wants the most secure screen lock that still allows quick access without typing. Which lock method best meets both requirements?

• Fingerprint recognition

• Swipe pattern

• PIN code

• Facial recognition with attention detection

An employee reports their company phone was left on a train and cannot be recovered. Which action should the IT technician take first to protect corporate data?

• Change the employee's email password

• Issue a remote wipe command through the MDM console

• Disable the employee's network account

• File a police report on behalf of the company

A school district deploys tablets for students and wants to prevent anyone from accessing them after five failed PIN attempts. Which setting should the technician configure?

• Locator application trigger

• Failed login attempt lockout policy

• Remote wipe threshold

• On-device firewall rule

A technician is securing a new Android phone before issuing it to a remote worker. Which TWO actions directly protect data stored on the device?

• Turning on Bluetooth discoverability

• Applying the latest OS security update

• Connecting the device to a public Wi-Fi network

• Enabling full device encryption

A manager needs to locate a lost company iPhone before deciding whether to wipe it. Which feature should already be enabled on the device to support this?

• On-device antivirus

• Find My iPhone or a similar locator application

• Device encryption

• Automatic OS update scheduling

A company allows employees to use personal phones for work email under a BYOD policy. Which profile security requirement best limits corporate data exposure on personal devices?

• Enrolling the device in an MDM with a separate work profile

• Issuing each employee a secondary corporate device

• Requiring employees to disable all third-party apps

• Blocking the employee's personal account from the mail server

A smart thermostat in a corporate office still uses the factory default admin password. What is the PRIMARY security risk this creates?

• The thermostat may drain the building's electrical supply

• Unauthorized users can access and control the device remotely

• The device will stop receiving firmware updates automatically

• Other IoT devices on the network will lose connectivity

A technician is writing an IoT security policy for smart cameras installed in a warehouse. Select all that apply: which practices should be included to reduce security risk?

• Disable unused ports and services on each device

• Change default credentials on every device before deployment

• Place IoT devices on an isolated network segment

• Disable firmware update notifications to reduce interruptions

A user sets up a swipe pattern instead of a PIN on their personal phone. How does this reduce security compared to a PIN?

• Swipe patterns are easier to observe and replicate from smudges on the screen

• Swipe patterns require more processing power to authenticate

• Swipe patterns disable biometric options on most devices

• Swipe patterns cannot be reset if forgotten, unlike a PIN

An IT department wants to ensure that if a corporate phone is lost, a backup of business data can be restored to a replacement device. Which feature should be configured in advance?

• Remote wipe

• On-device firewall

• Remote backup application

• Locator application