Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Using containerized software Reasoning: • Containerized software (mobile application/container management) isolates corporate data and apps from the personal side of the device. This way, sensitive data can be encrypted, controlled, and wiped remotely if needed — without affecting the user’s personal data. • This approach directly addresses data security on personal (BYOD) devices, which is the focus of the question. Why not the others? • A. Strong password policy → Helpful, but doesn’t specifically protect corporate data from exposure on personal devices. • C. Mandating pre-approved devices → Improves baseline security, but doesn’t solve the problem of data separation on personal devices. • D. Multi-factor authentication (MFA) → Protects access to systems, not data already on the device.
B.. Separating Critical Company data and applications from other third party applications and data might be a better approach. Since the enterprise data will be in a secured container.
I think the answer is C. Pre approving personal devices for corporate use can include installation of containers, remote discovery/wipe and other necessary security measures.