3.5 Securing Mobile Devices

Question 1

Define context-aware authentication

Answer 1

Using other information, such as location, proximity to other devices, in addition to multi-factor authentication to determine if the user is valid

Question 2

Define Containerization, relative to mobile device security (2)

Answer 2

1. With BYOD, user’s personal data needs to separated from company data
2. Containerization is the concept of dividing this data and providing the capability to remove company data without affecting personal data

Question 3

Define storage segmentation relative to mobile devices

Answer 3

An implementation of containerization where company data is stored separately from personal data on the device

Question 4

Define MicroSD HSM

Answer 4

Implementation of hardware security module on mobile devices provides hardware-based cryptographic functions

Question 5

Define MDM/UEM

Answer 5

Mobile Device Management/Unified Endpoint Management allows centralized management of security for all mobile devices within an organization

Question 6

Define Mobile Application Management (MAM)

Answer 6

allows management of and access to applications that are allowed to run on company mobile devices

Question 7

Define SEAndroid

Answer 7

Security enhancements for Android OS provides additional access controls and security policies for Android-based mobile devices

Question 8

Implementing third-party application security on mobile devices (2)

Answer 8

1. MDM/UEM can utilized to allow/disallow certain apps from running on the device
2. Even though an AppStore is provided for mobile apps, not every app is desirable or secure enough to allow

Question 9

Define concerns of rooting/jailbreaking mobile devices

Answer 9

A rooted/jailbroken (firmware) mobile device cannot be managed by MDM and allows sideloading of apps. Ensure all mobile devices are using the standard firmware for the OS

Question 10

Define USB OTG

Answer 10

USB On-the-Go, ability to transfer data from other devices to a mobile device via USB cable connection