Exam SY0-601 topic 1 question 624 discussion

If a mobile device does not meet the policy requirements, such as having an outdated OS or not being able to enable a screen lock, it should not be allowed access to corporate resources until it meets these requirements. to the point "posturing" becomes particularly relevant and first priority. Posturing, as part of a Mobile Device Management (MDM) solution, can assess the compliance of mobile devices with the corporate security policy. If a device is found to be non-compliant (e.g., due to an outdated OS or lack of a screen lock), the MDM solution can restrict or deny access to corporate resources until the device is brought into compliance. Posturing: Use posturing checks to verify that mobile devices comply with the policy's requirements, such as having an up-to-date OS and enabling a screen lock.

posturing is not mentioned in the CompTIA sec+ 601 book.

Posturing refers to the process of assessing and enforcing the security posture or compliance status of mobile devices within an organization's network. Such as up to date OS. Remote Wipe ...wipes remotely??

will go with DE, as this is one of the security features for end-users computing devices such as mobile device.

Posturing refers to the process of evaluating the security posture or compliance status of a device based on various factors such as operating system version, patch level, presence of security settings like screen lock, etc

Remote wipe: This control allows the organization to remotely erase corporate data from a device that is reported lost or stolen. It helps ensure that corporate data is removed from the device in compliance with the policy. Full-device encryption: Full-device encryption is essential to protect the data on the mobile device. It ensures that even if the device is lost or stolen, the data remains secure. Additionally, it's often a prerequisite for enabling secure screen lock methods (passcode or biometric) as mentioned in the policy.

CD is correct

• Mobile device OSs must be patched up to the latest release. • A screen lock must be enabled (passcode or biometric). Fulfilled by C. Posturing, checks the devices for compliance with policy (Will check if it have updates and screen lock enable) before allowing on the network. • Corporate data must be removed if the device is reported lost or stolen. Obviously D, "remote" "wipe"

Remote wipe allows the company to wipe the device if it gets lost or stolen. While FDE, coupled with the lock screen requirement, allows for the data to be protected. Posturing doesn't really factor in my opinion since that just lets the company assess whether you've met the other requirements before granting access