Exam CAS-003 topic 1 question 105 discussion

Actual exam question from CompTIA's CAS-003

Question #: 105
Topic #: 1

An organization enables BYOD but wants to allow users to access the corporate email, calendar, and contacts from their devices. The data associated with the user's accounts is sensitive, and therefore, the organization wants to comply with the following requirements:
✑ Active full-device encryption
✑ Enabled remote-device wipe
✑ Blocking unsigned applications
✑ Containerization of email, calendar, and contacts
Which of the following technical controls would BEST protect the data from attack or loss and meet the above requirements?

A. Require frequent password changes and disable NFC.
B. Enforce device encryption and activate MAM.
C. Install a mobile antivirus application.
D. Configure and monitor devices with an MDM.

Show Suggested Answer

Suggested Answer: D 🗳️

by TheSkyMan at Feb. 17, 2021, 6:34 p.m.

Comments

Submit Cancel

americaman80

4 years, 2 months ago

D is correct

upvoted 2 times

...

kiddie228

4 years, 5 months ago

@TheSkyMan: The article says MAM does not support full device encryption but rather MDM. So the correct answer is D

upvoted 3 times

Trap_D0_r

4 years, 5 months ago

D Indeed, B contradicts itself. "Enforce encryption and activate MAM" -- how are you going to enforce encryption? With MDM. There's no other way. The answer has to be D.

upvoted 1 times

D1960

4 years ago

The question specifies "Active full-device encryption." It seems that this cannot be done with MAM, you need MDM. https://www.infosys.com/mobility/white-papers/Documents/battle-MDM-MAM.pdf

upvoted 1 times

...

TheSkyMan

4 years, 5 months ago

This one is B. https://www.infosys.com/mobility/white-papers/Documents/battle-MDM-MAM.pdf

upvoted 1 times

vorozco

3 years, 5 months ago

Disagree that it is MAM (mobile application management) for reasons others have stated.

upvoted 1 times

...