Mobile Device Data Protection via Encryption

220-1202 By islever Editorial Last updated

Given a scenario, apply common methods for securing mobile devices

Short answer

A Encryption protects sensitive data at rest, ensuring it remains unreadable even if the device is lost and the user is unaware, unlike remote wipe which requires active intervention.

Question

A technician is deploying mobile devices and needs to prevent access to sensitive data if the devices are lost. Which of the following is the best way to prevent unauthorized access if the user is unaware that the phone is lost?
  1. Encryption Correct Answer
  2. Remote wipe
  3. Geofencing
  4. Facial recognition

Key Takeaways

The trap is choosing remote wipe; however, since the user is unaware, no active command can be sent, making passive encryption the only reliable protection for data at rest.

Learn why encryption is the best way to prevent unauthorized access to sensitive data on lost mobile devices when the user is unaware. CompTIA Mobile Technology Technician (CMTT) exam guide.

Common mistake: Remote wipe is often chosen because it sounds like a 'lost device' solution, but it fails the 'user is unaware' constraint because it requires an active trigger that cannot be executed in time.

Expert Analysis

The question asks for the best method to prevent unauthorized access to sensitive data on a lost mobile device when the user is unaware of the loss. The critical constraint here is that the user cannot take active measures like initiating a remote wipe because they do not know the device is missing.

Option B, Remote wipe, requires an active command from the administrator or owner. If the user is unaware the phone is lost, no one can issue the wipe command in time to protect the data before it is accessed. Therefore, remote wipe is reactive and dependent on awareness, making it unsuitable for this specific scenario.

Option C, Geofencing, restricts access based on location but does not inherently encrypt or lock data against physical possession. A thief with the device could still potentially bypass or exploit location-based restrictions if not tightly coupled with other security measures, and it doesn't directly address data confidentiality at rest.

Option D, Facial recognition, is an authentication mechanism for unlocking the device. While it prevents unauthorized users from logging in, it is not a data protection measure itself. If the device is stolen while unlocked (e.g., during use), facial recognition offers no protection. Furthermore, biometric methods can sometimes be bypassed or fail under duress, and they do not protect the data if the attacker gains physical access to the storage medium without needing to unlock the OS first.

Option A, Encryption, is the correct answer. Data encryption protects sensitive information at rest. Even if the device is physically lost and the user is unaware, encrypted data remains unreadable without the proper decryption key. This is a passive, always-on protection that ensures confidentiality regardless of whether the user knows the device is missing. It directly addresses the goal of preventing unauthorized access to the data itself, which is the primary concern in loss scenarios where active recovery is impossible.

Exam Strategy

When answering questions about lost or stolen devices, always check if the scenario allows for active intervention. If the user is unaware or unable to act, eliminate solutions that require manual triggering (like remote wipe) and prioritize passive, built-in protections (like encryption or screen locks).

Frequently Asked Questions

Why isn't remote wipe the best answer for a lost phone?

Remote wipe requires an active command to be sent to the device. If the user is unaware the phone is lost, they cannot send this command, leaving the data vulnerable until the loss is discovered.

Does facial recognition protect data if the phone is stolen while unlocked?

No. Facial recognition only secures the login process. If the device is already unlocked or if the attacker accesses the file system directly, biometrics offer no protection for the data at rest.

More 220-1202 FAQ →

Community Votes

A
67%
D
33%

67% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. Dese_2point71 👍 6 Answered A
    "If the user is unaware that the phone is lost," is key, that means we need something passive, best option in this case is encryption. If the user actually knew their phone was lost I would say remote wipe but that isn't the case.
  2. cde24c9 👍 1 Answered A
    The correct answer is A, Encryption. I would like to know why people are choosing A. Facial Recognition does not protect the data. If the phone is locked: Encryption helps protect the stored data from unauthorised access. If the phone is already unlocked: The operating system may already have decrypted the data needed for access. A thief could potentially view sensitive information. If the phone is lost without the owner's knowledge: Encryption remains an important protective measure because it does not depend on the owner taking action after the loss.
  3. 7614739 👍 1 Answered D
    Encryption will only protect data. It will not protect against access that the user is unaware of. Facial recognition is the only mechanism that prevents access.
  4. PeterPerfect 👍 1 Answered D
    the question states "prevents unathourised access" pointing to answer D Facial recognition
  5. da18331 👍 1 Answered A
    If unaware phone is lost, then passive method like encryption will work.
Show 1 more comment
  1. ishan94 👍 1 Answered A
    A. Encryption

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Practice All 220-1202 Questions

Access 105 questions with complete answers and detailed explanations.

View Full 220-1202 Practice Test →

← Back to 220-1202 Study Guide