Several Days After Deploying an MDM for Smartphone Control, an Organization

question 354

Multiple Choice

Several days after deploying an MDM for smartphone control, an organization began noticing anomalous behavior across the enterprise. Security analysts observed the following: Unauthorized certificate issuance Access to mutually authenticated resources utilizing valid but unauthorized certificates Granted access to internal resources via the SSL VPN To address the immediate problem, security analysts revoked the erroneous certificates. Which of the following describes the MOST likely root cause of the problem and offers a solution?

• A) The VPN and web resources are configured with too weak a cipher suite and should be rekeyed to support AES 256 in GCM and ECC for digital signatures and key exchange.
• B) A managed mobile device is rooted, exposing its keystore, and the MDM should be reconfigured to wipe these devices and disallow access to corporate resources.
• C) SCEP is configured insecurely, which should be enabled for device onboarding against a PKI for mobile-exclusive use.
• D) The CA is configured to sign any received CSR from mobile users and should be reconfigured to permit CSR signings only from domain administrators.

---

Definitions:

Conglomerate

A large corporation composed of diverse companies in various industries under a single corporate group, often achieved through mergers and acquisitions.

Interlock

A situation where members of the board of directors in one company also serve as members of the board in another company, potentially creating conflicts of interest.

Clayton Act

A U.S. legislation enacted in 1914 aimed at preventing anti-competitive practices in their incipiency, including prohibiting mergers and acquisitions that could reduce competition.

Corporate Officers

Executives or high-ranking officials within a corporation who are given authority to make decisions and oversee the day-to-day operations and strategic planning of the company.