Preventing Data Leakage via Mobile App Installation Policies
As a cybersecurity analyst for a large corporation, you are auditing the company's mobile device management (MDM) policy. One of your areas of concern is data leakage from company-provided smartphones. You are worried about employees unintentionally installing malicious apps that could access sensitive corporate data on their devices. Which of the following would be an effective measure to prevent such data leakage?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The core concept is application control within Mobile Device Management (MDM). The common trap is selecting general security measures like VPNs or biometrics that do not address the specific vector of unauthorized app installation.
This question examines MDM strategies to prevent unauthorized app installations on mobile devices. The correct answer focuses on restricting app sources to mitigate the risk of malicious software accessing corporate data.
Candidates often choose C (VPNs) because they associate it with secure data access. However, a VPN protects data in transit, not the endpoint device from installing malicious apps that could exfiltrate data locally.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Enforcing a policy that restricts app installations to approved corporate app stores (Option D) is the most effective measure among the choices for preventing data leakage caused by malicious apps. This approach, often implemented via Mobile Application Management (MAM) or strict MDM profiles, ensures that only vetted, safe applications are present on the device, eliminating the primary vector described in the scenario.Why the Other Options Are Wrong
Biometric authentication (A) secures physical access to the device but does not prevent the installation of malware if an employee sideloads an app. Changing Wi-Fi passwords (B) protects network entry points but is irrelevant to app source integrity. Mandating VPNs (C) encrypts traffic between the device and the corporate network; however, if a malicious app is already installed, it can potentially capture data before encryption or after decryption, making this a weak defense against the specific threat of malicious apps.Community Comment Notes
The community consensus strongly supports Option D as the only logical choice for controlling app sources. One commenter noted that this aligns with standard MDM practices for restricting app installation channels, effectively isolating the risk of unauthorized software.Exam Strategy
When addressing data leakage risks related to endpoints, prioritize controls that limit the attack surface at the source. If the threat is malicious software, look for answers involving application whitelisting, sandboxing, or restricted app stores rather than network-level protections.
Frequently Asked Questions
Why isn't a VPN sufficient to stop data leakage?
A VPN secures data in transit but does not prevent a malicious app from capturing data locally on the device or sending it out through other means.
Does biometric authentication prevent malware?
No, biometrics only verify user identity for device unlock. They do not stop an employee from downloading and installing unauthorized or malicious applications.