Mobile Data Security After Device Theft

Identity and Access Management
Answer Correct answer: D — Implement containerization to isolate corporate data and applications from personal data on the mobile device.

A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the following provides the best solution to increase mobile data security on all employees’ company mobile devices?

  1. Application management
  2. Full disk encryption
  3. Remote wipe
  4. Containerization Correct Answer

Community Votes

D
55%
C
45%

55% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The exam tests the distinction between protecting the entire device versus isolating business applications, with containerization being the superior method for preventing unauthorized access to corporate resources.

This question addresses the best technical control to protect data on a stolen mobile device when credentials are compromised. Containerization is identified as the correct solution to isolate corporate data from personal storage.

Candidates often choose Remote Wipe because it removes data, but this fails if the attacker acts before the wipe occurs or if the device is offline. Full Disk Encryption is also common but less effective if the device is unlocked and the attacker has the password.

Community Discussion (41 comments)

spearous 👍 18
here is my update as promised. I took 601 exam and passed as ~800 1. review all PBQs here , basically 153, 155, 156,157, 725, 726,731, 733, 734. the PBQ i got are all from these. 2. i reviewed 600-860 twice or more, made cards with questions i did wrong and tried to remember it if I don't understand it. When I finished exam there is still quite some time left, i think this card exercise help me to increase the speed. then you got time left to focus on questions not so sure of. 3. i worked like 10 hrs per week, but last four days worked more than 4 hrs each day. together like about 30+16hrs. i have 4+ yrs software developer experience though. YOU CAN DO THIS!! GOOD LUCK!!
sneedfeed2 👍 16
Took my cert in March and 95% of the questions I had were from this list. Nearly all of them were between questions ~600-800. I only went though these questions once but I scored an 800.
Alcpt 👍 1 Selected: C
Remote wipe that business data! C what good is containerization if the attacker has the login creds?
PotatoMovement 👍 1
Thank you Examtopics. I just passed my exam last month !
0604d1d 👍 2
Took it today... The Last day you can take 601... had this sinking feeling when I ran out of time. Then took the survey...thinking holy #%#$ I am going to have to start studying 701... Then It said "Congratulations!" and I passed with a 785!!! I almost started crying. Thanks for all the great discussions!!!! I would say maybe 1/3 of the Q's were on this site and when you can answer them in a 2 seconds it saves time for the others. Thanks Exam Topics!
Ken_Kaniff 👍 1
Just took the exam and made a 765. Had four PBQs and three of them are from here, but barely any of the questions from this dump were on there. Make sure and not rely just on these questions. When I got done I was thankful I took the time to read the book. Because I would have failed if I just studied this dump.
oktonaught 👍 3
I reviewed all the questions, probably twice by now, and looked over 600-860 a couple times like others recommended. I'll take the exam in the next day or so. Since others here are saying half the questions showed up from 600-860, I would look over the other questions just to be safe, if not to understand the exam topics more. Acronyms and port numbers are my weakness.
2d3d7b4 👍 1
I am taking it in a few days, i have been focusing on 600 + but now trying to go over older questions. so hopefully it goes well. I am nervous I have used this site in the past and it has been super helpful. I will post my results after I take the exam
76fca43 👍 3
I Passed!!! 775... I took the 601 and I believe around 40% of the questions were the same and 3/4 PBQs were the same
G4h9s12s 👍 2
Welp I guess this is the end(Hopefully lol). I take my 601 exam tomorrow morning. I have gone through all 860 questions at least once, some of them twice. I am going to try to go through 600-860 and all PBQs again before tomorrow.... I am so nervous...Wish me luck! I will post my results here.
4a8c1a0 👍 4
Took my cert today, I passed with a 780. I will say most of the PBQ was from here. Had a total of 74 questions and I will say only about 45 % were from this dump. All in all, Im happy I can finally put this behind me, but I will definitely be back on here for future exams. Till next time yall! :)
Soul777 👍 1
Thank you all for the hard work and effort. Will be taking my 601 exam in 2 days
ComptiaSEC601 👍 1
hello everyone - anyone who took exam recently can confirm validity of questions here? I am going to take exam soon, went through all questions here (and discussion section) so I am just trying to assess if study 860 questions from here are enough. Thank you
kaixin 👍 1
Like SlugLife, I took 601 exam today, June 28th 2024, I had total 74 questions, 1. 3 PBQ's were from this dump, 1 PBQ is new, not found here 2. for the rest questions, I would say approx. 30% were from 600-860, the rest were not. I thoroughly review and tested myself for questions between 600-860 at least three times, also studies some other questions from this dump previously, while I saw the exam question, I thought I may fail the test, luckily I passed. Few tips: if you were deciding to choose 601 or 701 now, choose 601 because you have comparatively more resource can utilize than 701 study the questions and read the discussions, it helps to build your knowledge. thanks for the people who contributed in the discussion previously good luck to your exam!
a8db817 👍 1
Guys I took the exam this morning and passed. A lot of the questions were from this site, 3 of the 4 PBQs. Study these and you can do it!
SlugLife 👍 7
Ok brothers, I took the 601 exam today, June 14th 2024, passed with a 769 score. I had a total of 74 questions, about 50% of the questions for me were on this dump. I also had 4 PBQ's(they actually were the first 4 questions on my exam) that were from this dump, all exactly as listed here. I went over all of the questions twice, focused on questions 600-860 as other have stated to do. I also had viewed all of Professor Messor's 601 videos on youtube. I spent a total of 1 1/2 months studying for this 601 exam, two to three hours a day. You guys can do this!! Just go over all of these questions twice, spend a day or two before the exam reviewing the PBQ's and you guys will also pass this exam. Remember, the 601 is being retired on July 31st, 2024. I will definitely be on this site for other exams and when I recertify in three years with the 701. Thank you all for your input on these discussions, they truly help. Good luck brothers!! Believe and you will see!
mike1123 👍 7
Hey everyone, this is most likely the most current status update. Took the test a few days ago, and scored a 781/800. Too close for comfort. And yes, I'm confirming I did take the SY0-601 exam. The exam definitely had questions from 1-860 on this site, most coming from 600+. I had 4 PBQs, 3 of which were here, and the 4th wasn't from this site :'( I'd probably say 50% of the questions were from here, and 50% were questions I've never seen before. A lot of people here claimed they had 90+% of the questions from 600+, but i guess it may come down to luck and which questions you get on your exam. I studied from Professor messor, Dion, and a ton of other sources. I'm glad this is over, and hope this helps
d845f70 👍 7
Gentlemen, it was a grueling journey to make it to the end of these 860 questions. The work isn't done yet, but I feel proud of everyone who made it this far! Going to review 600-860 like people have been recommending and hopefully pass when I test in 4 days. I'll see you mad lads on the other side!!!
ballum 👍 5
I'm wondering if anybody has taken the 601 test within the last 2 weeks and if the questions came from this dump. Let me know!
akeemcsfrancis 👍 3
Took exam and pass 777 May 20th 2024, unfortunately for me only 10 or so questions came from dump. My advice to you read discussions and every answer know why the answer is and why not the others
AspiringNerd 👍 4 Selected: D
Take my test tomorrow morning 5/17/2024. I’ll be back to give my review pass or fail. Answer is containerization. You’ll be able to wipe within the container.
Ayomide22 👍 6
I will want to thank everyone that contributed on this platform, I can’t thank you guys enough I just did my exam today 15 may 2024 and I passed with 800 . At least 90 percent came out from my exam questions while like 10 percent was new , all the PBQ questions came from here I’ve only 3 that came out. Just study from 600-860 at least 2-3 times and you’ll be good
durel 👍 3 Selected: C
Remote wipe - Containerization still does not protect if they device is logged on to.
6de42b3 👍 2
I passed the exam today 779 score. There were a lot of unknown questions in my case, there was even a simulation that I'm not sure it's in here. 74 questions in total and almost two third were new to me. So don't just memorising the answers, follow the discussion sections and make sure you understand everything. Good luck boys
Mehe323 👍 3
If an attacker is able to login, is full disk encryption not a better solution?
abyss_blue 👍 4
Passed the exam! Scored 900 (full marks). Some new questions introduced but majority are drawn from the list. Good luck!
09e6c12 👍 8
Just passed the exam with 814. Most of my exam questions are from 600 till the end - had only three or four that were not in here. All PBQs were from this dump as well! So if I may give suggestion: Look at the PBQs from the whole bank of questions (around ten?) For multi choice, only look at 600 till the end! Thanks for everyone’s input/comments/advice and good luck!
russian 👍 2 Selected: D
Its D. Containerization - it involves creating isolated environments (containers) on the mobile device where business data and applications are stored separately from personal data and apps. This approach ensures that even if the device is compromised, the business data within the container remains protected. other answers: A. App management - not mobile device security B. If you encrypt it you dont have access to anything at all C. Wiping is good to get rid of the data so that threat actors couldn't access it but that doesnt increase encryption
c97d37d 👍 7
I passed my exam 29/04/2024 - Thank you for everyones input. Focus on questions 600 - till here. Literally every question was from there. I had 74 Questions. Passed first time no IT experience with 799. Thanks. Oh PBQS: 734, 733, 153, 731
Gabuu 👍 4
Just got done taking the exams today (26 April 2024). 804/900. I had about 3 or 4 questions that were not from this dump. Almost all the questions were from 600 to 860. PBQs were also from here. I wish everyone preparing to take the exams the very best. Believe in yourself. You can do it.
_invalid_nickname 👍 3 Selected: C
Remote wipe is the only option that ensures the attacker, who has credentials to access the stolen phone, can no longer access company data.
d24ccd5 👍 7
Hey guys. I just passed my exam today 04/19/2024 with an 807. This is the last available review question so far. I went thru all questions 1-864 once and like sneedfeed said I reviewed 600-864 a second time. Study all the PBQs available they’re exactly like the exam. I had the 3 fire walls. The infected server. And the data classification. I’d say 95% of my questions were from here as well. Good luck to everyone
ec05581 👍 3 Selected: D
Remote wipe because it's a company mobile device, not a personal one.
12b7059 👍 9
Where are the last 4 questions?
LuckyAro 👍 2 Selected: B
All answers will provide the requested functionality, it's a matter of preferrence
ekiel 👍 3 Selected: C
C. Remote Wipe, Corporate data must be removed if the device is lost or stolen
ID77 👍 2 Selected: D
Containerization increase mobile data security on all employees' company mobile devices. Containerization involves separating business applications and data from personal ones by creating secure containers. This ensures that even if a threat actor gains access to the device through a compromised username and password, they would only have access to the containerized business data and applications, keeping personal data secure.
Ainevknow01 👍 1 Selected: D
Containerization falls under MDM
Theoreign 👍 1 Selected: B
Full disc encryption
Ravnit 👍 3
B. Full disk encryption. Containerization is a valid security measure for mobile devices, but it typically focuses on isolating applications and their associated data rather than encrypting the entire disk. While containerization can prevent unauthorized access to specific apps and data, it may not protect against someone gaining access to the device's storage at a lower level, such as through physical access or by bypassing application-level security. Full disk encryption ensures that all data stored on a device's disk is encrypted, protecting it from unauthorized access even if the device falls into the wrong hands
paCer66 👍 1
D. See https://www.airdroid.com/mdm/containerization-in-mdm/ for more info regarding MDM work profile/container.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Containerization (Option D) creates a secure, isolated environment on the device that holds corporate data and applications. Even if the attacker logs in with valid credentials, they cannot access the contents of the secure container without specific authentication or bypassing the container's security controls. This ensures that corporate data remains protected regardless of whether the OS-level login is compromised.

Why the Other Options Are Wrong

Application management (Option A) controls which apps can be installed but does not inherently protect data once an app is running. Full disk encryption (Option B) protects data at rest, but since the attacker successfully logged in, the volume is likely already decrypted and mounted for use. Remote wipe (Option C) is a reactive measure; it destroys data rather than securing it during the theft, and may fail if the device is offline or wiped by the attacker first.

Community Comment Notes

The community comments largely discuss general exam preparation strategies, such as focusing on questions 600-860 and reviewing PBQs. One user noted scoring high by reviewing these specific sections, while another confirmed passing after studying similar scenarios. The comments do not provide specific technical debate on this question but confirm the relevance of mobile security topics in the exam.

Exam Strategy

When a question involves 'stolen' devices and 'data security,' look for solutions that isolate business data from personal data or restrict access to specific corporate resources. Prioritize preventive isolation over reactive destruction.

Frequently Asked Questions

Why isn't full disk encryption the best answer?

FDE protects data at rest, but since the attacker successfully logged in, the device is likely unlocked and the data is accessible in memory or via active sessions.

Does remote wipe protect data from theft?

No, remote wipe destroys data. It is a recovery action, not a protection mechanism that allows continued secure operation or prevents immediate access.

Related Analysis

← Back to SY0-601 Study Guide