Configure Mobile OS Security

Question 1

Answer 1

Configuring screen lock options in iOS (left) and Android (right).

Question 2

Answer 2

Google Play store has a Play Protect feature that is enabled by default.

Question 3

Answer 3

Endpoint management software such as Microsoft Intune can be used to approve or prohibit apps.

Question 4

Answer 4

In iOS, the data protection encryption option is enabled when a passcode is configured (left, at
bottom)

Question 5

Answer 5

Using Google’s default remote backup service.

Question 6

Answer 6

You can use the Google’s Find Device app to locate an Android device and remotely lock or wipe it
(or send the current holder a polite message to please return it ASAP).

Question 7

Answer 7

Philips Hue smart lighting management app. management app connects to the hub (a Hue Bridge) via Wi-Fi.

Question 8

Screen locks

Answer 8

protect mobile devices from unauthorized access, preventing attackers from stealing cached passwords, confidential files, and message history that could aid social engineering attacks.

Question 9

screen lock ensures

Answer 9

device security by requiring an unlock gesture after inactivity or a power button press. While a simple swipe allows unauthenticated access, personal devices should be protected with an authentication method like a PIN, password, pattern, or biometric verification.

Question 10

Screen locks prevent

Answer 10

unauthorized access by requiring authentication methods like a PIN, password, fingerprint, or facial recognition, securing mobile devices against threats.

Question 11

Mobile security software protects

Answer 11

devices against malware, phishing, and exploits, using patches, antivirus, anti-malware apps, and firewalls. Keeping OS and app updates current is essential, with iOS updates delivered via Settings > General > Software Update and Android updates managed by vendors through Settings > System > Advanced > System updates.

Question 12

Antivirus apps

Answer 12

filter content, block phishing sites, and monitor app permissions, while firewalls manage network activity by controlling connections to ports or IP addresses. “No-root” firewalls create a VPN to regulate app access without requiring root privileges.

Question 13

Enterprise Mobility Management (EMM)

Answer 13

ensures secure mobile device usage in corporate environments through deployment models like BYOD, COBO, COPE, and CYOD. Mobile Device Management (MDM) enforces security policies, restricting app use, managing updates, and controlling built-in functions. Organizations tailor security profiles based on employee roles and site requirements, applying both technical restrictions and soft measures like training to enhance data protection.

Question 14

BYOD

Answer 14

model allows employees to use personal devices for work but requires security oversight to mitigate risks like unauthorized access and data exposure.

Question 15

COBO (Corporate Owned, Business Only) model

Answer 15

ensures strict security by providing company-owned devices that are exclusively used for work-related tasks, preventing personal use and reducing data exposure risks.

Question 16

COPE (Corporate Owned, Personally Enabled) model

Answer 16

provides employees with company-owned devices, allowing limited personal use while enforcing security policies to maintain corporate control and data protection.

Question 17

CYOD (Choose Your Own Device) model

Answer 17

allows employees to select a device from an approved list, balancing personal preference with company security requirements while maintaining corporate control over configurations and policies.

Question 18

Mobile data security

Answer 18

helps prevent unauthorized access to sensitive information when a device is lost or stolen. Device encryption protects stored data, with iOS using multi-layer encryption and Android offering file-level encryption by default since Android 10. In iOS, Data Protection encryption is enabled when a passcode lock is set, safeguarding email and app data.

Question 19

Remote backup applications

Answer 19

ensure mobile devices retain critical data by syncing with cloud services like iCloud (iOS), Google Sync (Android), and OneDrive (Microsoft). Users can also opt for third-party providers such as Dropbox or backup directly to a PC, with iOS supporting backups via macOS or iTunes on Windows. MDM software can further automate backups for corporate-managed devices.

Question 20

Locator apps

Answer 20

use GPS and IPS to track lost or stolen mobile devices, with built-in find-my-phone features available on Android and iOS. These apps can remotely lock the device, display recovery messages, disable wallets, prevent passcode changes, and block network settings from being altered.

Question 21

remote wipe

Answer 21

If a device is unrecoverable, a remote wipe can erase all data, returning it to factory settings. For corporate devices enrolled in MDM, an enterprise wipe can remove business accounts and files while preserving personal apps and data.

Question 22

Internet of Things (IoT) security

Answer 22

focuses on protecting connected devices—such as home automation systems, smart appliances, and vehicles—from cyber threats. These devices communicate using networked sensors and software, making them potential targets for unauthorized access, data breaches, and malware attacks. Securing IoT requires strong encryption, regular software updates, and strict access controls to prevent vulnerabilities.

Question 23

Home Automation Systems

Answer 23

Home automation systems use smart hubs, wireless mesh networking, and IoT-enabled devices to allow remote control of household functions while ensuring seamless communication between connected appliances.

Question 24

IoT security risks

Answer 24

stem from weak default settings, inadequate patching, and unauthorized device deployments, requiring regular audits and employee training to mitigate vulnerabilities.