3.5 Given a scenario, implement secure mobile solutions.3.6 Given a scenario, apply cybersecurity solutions to the cloud.

Question 1

What features of Airwatch can benefit a company?

Answer 1

Full drive encryption, containerization, application management

Question 2

CYOD

Answer 2

This is a policy used by organizations that allows employees to choose their own devices for work purposes, from a list of approved options. It’s a strategy that sits between “Bring Your Own Device” (BYOD) and standard issue corporate devices.

Question 3

BYOD

Answer 3

It’s a policy used by organizations where the company owns the devices (like smartphones, tablets, laptops) but allows employees to use them for personal reasons as well. This approach gives the organization more control over the device, ensuring security and compliance, while still offering flexibility to the employee.

Question 4

COPE

Answer 4

“COPE” stands for “Corporate-Owned, Personally-Enabled.” It’s a policy used by organizations where the company owns the devices (like smartphones, tablets, laptops) but allows employees to use them for personal reasons as well. This approach gives the organization more control over the device, ensuring security and compliance, while still offering flexibility to the employee.

Question 5

CASB

Answer 5

A Cloud Access Security Broker (CASB) is a part of security as a service that monitors network traffic between a company’s network and cloud provider, enforcing security policies.

Question 6

Iaas

Answer 6

Infrastructure as a Service, (IaaS) allows for the outsourcing of equipment and support operations. The service provider owns, maintains, and manages the equipment.

Question 7

Attestation

Answer 7

Attestation is the process of checking and validating system files during a boot process.

Question 8

Regional Replication

Answer 8

Regional replication (also called zone-redundant storage) replicates your data across multiple data centers within one or two regions.

Question 9

NSWG

Answer 9

Next-generation secure web gateway (SWG) is a modern implementation of content filters that also performs threat analysis and other integrated services like data loss prevention (DLP).

Question 10

What security issues can occur when using a Bluetooth device?

Answer 10

Authentication and authorization occur when devices authenticate using a simple passkey configured on both devices.
Device discovery occurs when a device can be put into discoverable mode, meaning that it will connect to any other Bluetooth devices nearby, which can pose a security issue.
Malware occurs when there are proof-of-concept Bluetooth worms and application exploits, which can compromise any active and unpatched system, regardless of whether discovery is enabled and without requiring any user intervention.

Question 10

How do you jailbreak a device?

Answer 10

A user boots the device with a patched kernel while the device is attached to a computer.

Question 10

Firewall filterting at layer 3

Answer 10

Firewall filtering at layer 3 of the Open Systems Interconnection (OSI) model can isolate communication between the on-site backup solution and the cloud storage service via IP address. This prevents other services or external threats from access the cloud resource.

Question 10

Network location

Answer 10

A network location identifies a user or device based on an IP address, subnet, virtual LAN (VLAN), or organizational unit (OU). This can be used as an account restriction mechanism.

Question 11

geolocation

Answer 11

A geolocation can be determined by IP addresses provided by an Internet Service Provider (ISP) which are linked to geographical areas. Global positioning system (GPS) sensors can also determine geolocation.

Question 12

geotagging

Answer 12

Geotagging refers to the addition of location metadata to files or devices. This is often used for asset management.

Question 13

geofencing

Answer 13

Geofencing refers to accepting or rejecting access requests based on geographic location. Geofencing can also be used for push notifications to send alerts or advice to a device when a user enters a specific area.

Question 14

Risky login policy

Answer 14

A risky login (also known as impossible travel time) policy tracks the location of login events over time. If these do not meet a threshold, the account will be disabled, notifying the real user of an account issue.

Question 15

Identity provider

Answer 15

The identity provider is the service that provisions the user account and processes authentication requests. In this scenario, various protocols and frameworks are available to implement federated identity management across web-based services.

Question 16

Identity attributes

Answer 16

Identity attributes enable access management systems to make informed decisions about whether to grant or deny an entity access. A person’s role is an example of an identity attribute.