Preventing Data Leakage via Mobile App Installation Policies

312-50v12 By islever Editorial Last updated

Hacking Mobile Platforms

Short answer

D Enforce a policy that only allows app installations from approved corporate app stores.

Question

As a cybersecurity analyst for a large corporation, you are auditing the company's mobile device management (MDM) policy. One of your areas of concern is data leakage from company-provided smartphones. You are worried about employees unintentionally installing malicious apps that could access sensitive corporate data on their devices. Which of the following would be an effective measure to prevent such data leakage?
  1. Require biometric authentication for unlocking devices.
  2. Regularly change Wi-Fi passwords used by the devices.
  3. Mandate the use of VPNs when accessing corporate data.
  4. Enforce a policy that only allows app installations from approved corporate app stores. Correct Answer

Key Takeaways

The core concept is application control within Mobile Device Management (MDM). The common trap is selecting general security measures like VPNs or biometrics that do not address the specific vector of unauthorized app installation.

This question examines MDM strategies to prevent unauthorized app installations on mobile devices. The correct answer focuses on restricting app sources to mitigate the risk of malicious software accessing corporate data.

Common mistake: Candidates often choose C (VPNs) because they associate it with secure data access. However, a VPN protects data in transit, not the endpoint device from installing malicious apps that could exfiltrate data locally.

Expert Analysis

Why the Answer Is Correct

Enforcing a policy that restricts app installations to approved corporate app stores (Option D) is the most effective measure among the choices for preventing data leakage caused by malicious apps. This approach, often implemented via Mobile Application Management (MAM) or strict MDM profiles, ensures that only vetted, safe applications are present on the device, eliminating the primary vector described in the scenario.

Why the Other Options Are Wrong

Biometric authentication (A) secures physical access to the device but does not prevent the installation of malware if an employee sideloads an app. Changing Wi-Fi passwords (B) protects network entry points but is irrelevant to app source integrity. Mandating VPNs (C) encrypts traffic between the device and the corporate network; however, if a malicious app is already installed, it can potentially capture data before encryption or after decryption, making this a weak defense against the specific threat of malicious apps.

Community Comment Notes

The community consensus strongly supports Option D as the only logical choice for controlling app sources. One commenter noted that this aligns with standard MDM practices for restricting app installation channels, effectively isolating the risk of unauthorized software.

Exam Strategy

When addressing data leakage risks related to endpoints, prioritize controls that limit the attack surface at the source. If the threat is malicious software, look for answers involving application whitelisting, sandboxing, or restricted app stores rather than network-level protections.

Frequently Asked Questions

Why isn't a VPN sufficient to stop data leakage?

A VPN secures data in transit but does not prevent a malicious app from capturing data locally on the device or sending it out through other means.

Does biometric authentication prevent malware?

No, biometrics only verify user identity for device unlock. They do not stop an employee from downloading and installing unauthorized or malicious applications.

More 312-50v12 FAQ →

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. insaniunt 👍 4 Answered D
    D. Enforce a policy that only allows app installations from approved corporate app stores. Module 17 Page 2717
  2. g_man_rap 👍 1
    D. This tool does not provide insights into how long an email was read, as it's more focused on the journey of the email and where it was accessed rather than interaction details.
  3. LordXander 👍 1 Answered D
    The only one, the chosen one because...it's the only one that makes sense

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Comprehensive Network Scanning Sequence

S-grade

NetBIOS Enumeration on IPv6 Networks

S-grade

Ethical Hacker Liability and Organizational Risk Acceptance

S-grade

Least Likely Social Engineering Method Based on Footprinting Data

S-grade

← Back to 312-50v12 Study Guide