Exam CISSP topic 1 question 266 discussion

Actual exam question from ISC's CISSP

Question #: 266
Topic #: 1

Management has decided that a core application will be used on personal cellular phones. As an implementation requirement, regularly scheduled analysis of the security posture needs to be conducted. Management has also directed that continuous monitoring be implemented. Which of the following is required to accomplish management's directive?

A. Routine reports generated by the user's cellular phone provider that detail security events
B. Strict integration of application management, configuration management (CM), and phone management
C. Management application installed on user phones that tracks all application events and cellular traffic
D. Enterprise-level security information and event management (SIEM) dashboard that provides full visibility of cellular phone activity

Show Suggested Answer

Suggested Answer: B 🗳️

by stickerbush1970 at Sept. 14, 2022, 6:31 p.m.

Comments

Submit Cancel

CuteRabbit168

Highly Voted 1 year, 5 months ago

Selected Answer: B

Question refers to MDM. Correct answer should be B. Answer C - tracking cellular traffic would be a major privacy concern.

upvoted 7 times

...

136878b

Most Recent 1 week, 4 days ago

Selected Answer: B

B is description of MDM.

upvoted 1 times

...

BigITGuy

4 months, 3 weeks ago

Selected Answer: B

Ensures the application is secured and monitored and the device's configuration is compliant and monitored continuously.

upvoted 1 times

...

kobegraham

7 months, 3 weeks ago

Selected Answer: D

I choose D over B because B doesn't directly provide continuous monitoring or security posture analysis.

upvoted 1 times

...

RVoigt

11 months, 4 weeks ago

Selected Answer: B

CISSP Official Study Guide pg 414 - "Application control or application management is a device-management solution that limits which applications can be installed onto a device. It can also be used to force specific applications to be installed or to enforce the settings of certain applications in order to support a security baseline or maintain other forms of compliance. Using application control can often reduce exposure to malicious applications by limiting the user's ability to install apps that come from unknown sources or that offer non-work- related features. This mechanism is often implemented by an MDM. Without application control, users could theoretically install malicious code, run data stealing software, operate apps that reveal location data, or not install business-necessary applications."

upvoted 4 times

jackdryan

9 months, 1 week ago

B is correct

upvoted 1 times

...

Rollingalx

1 year ago

Option B may be relevant to the management of the application, configuration and phone, but it does not address the security monitoring and analysis requirements outlined in the question.

upvoted 4 times

...