Exam 220-1002 topic 1 question 296 discussion

Actual exam question from CompTIA's 220-1002

Question #: 296
Topic #: 1

A network administrator audited applications on a user's desktop and noticed a program used to sync a mobile device to the desktop's calendar. To ensure corporate data is not exchanged to cloud servers, which of the following mobile security methods should be implemented?

A. Remote wipe
B. Device encryption
C. Biometric authentication
D. Enterprise sandbox

Show Suggested Answer

Suggested Answer: D 🗳️

by zzlawrence at March 3, 2021, 8:08 a.m.

Comments

Submit Cancel

shogo11

Highly Voted 4 years, 2 months ago

Nowhere in Comptia is Sandbox environments mentioned..... I thought it would be Device encryption

upvoted 7 times

...

[Removed]

Highly Voted 3 years, 7 months ago

Trick question. I had to think about for a while. could be B but sandbox sound even better. A sandbox box is a containerised isolated environment. An example of this is Microsoft Intune company portal. Intune is Microsoft cloud(some else's datacentre)based mobile device management platform. The company portal app(ios/andriod) is "sandboxed" from rest of the mobile environment. Another specific example is virtualization, when you run a Virtual machine it's "sandboxed" from other virtual machines or host(unless networked). In terms of security it's mainly used as a test environment, for example you can execute a virus in a sandbox environment and it will not affect rest of the host.

upvoted 5 times

iLikeBeagButt

3 years, 1 month ago

So it could be sandbox, if the admin believes the program is a malicious software that needs to be isolated in a sandbox environment so that it run without affecting the rest of the network or hosts...

upvoted 1 times

...

Nat2down

Most Recent 2 years, 10 months ago

Selected Answer: D

Sandboxing protects "live" servers and their data, vetted source code distributions, and other collections of code, data, and/or content, proprietary or public, from changes that could be damaging to a mission-critical system or which could simply be difficult to revert, regardless of the intent of the author of those changes. Since the question is stating " To ensure corporate data is not exchanged to the cloud servers" I would pick D.

upvoted 1 times

...

ronah

3 years, 4 months ago

if it says encrypt data then i will choose that, but the option says device encryption its not the right one. maybe another question that doesn't have any points.

upvoted 1 times

...