What is the primary security concern for a BYOD program?

SY0-701 By islever Editorial Last updated

Short answer

D Jailbreaking

Question

Which of the following is a primary security concern for a company setting up a BYOD program?
  1. End of life
  2. Buffer overflow
  3. VM escape
  4. Jailbreaking Correct Answer

Key Takeaways

The exam tests your ability to identify threats unique to unmanaged personal devices, with the common trap being confusion between general vulnerabilities and device-specific policy violations like jailbreaking.

A primary security concern when establishing a Bring Your Own Device (BYOD) program is jailbreaking, which removes manufacturer-imposed security restrictions and exposes corporate data to risk. Community consensus strongly supports jailbreaking as the correct answer for SY0-701.

Common mistake: Some candidates may choose 'Buffer overflow' or 'VM escape' because they are well-known vulnerabilities, but these are not primary concerns specific to BYOD policy enforcement.

Expert Analysis

Why the Answer Is Correct

Jailbreaking (or rooting) removes the manufacturer's built-in security controls on mobile devices, allowing unauthorized applications and configurations that can bypass corporate security policies. In a BYOD environment, the organization has limited control over personal devices, making jailbreaking a primary concern because it directly undermines device integrity and data protection. Comments [1], [2], [3], and [4] all emphasize that jailbreaking exposes the corporate network to malicious software and data leakage.

Why the Other Options Are Wrong

End of life (A) refers to unsupported software or hardware, which is a lifecycle management issue rather than a BYOD-specific primary concern. Buffer overflow (B) is a software vulnerability related to coding flaws, not a policy or device management issue unique to BYOD. VM escape (C) is a virtualization-specific attack where a guest OS breaks out of its virtual machine, which is unrelated to mobile device management in a BYOD context.

Community Comment Notes

All four comments unanimously agree that D is correct. Comment [2] provides a detailed list of what jailbreaking allows users to do, reinforcing why it is dangerous in a corporate environment. Comment [3] explicitly ties jailbreaking to the removal of built-in security controls, making it the most relevant BYOD concern among the options.

Official Reference

https://csrc.nist.gov/publications/detail/sp/800-124/rev-1/final

This link opens the official vendor documentation in a new tab.

Exam Strategy

When a question asks about a 'primary concern' in a specific context like BYOD, focus on the option that directly relates to the unique challenges of that scenario. Eliminate general vulnerabilities that apply to any computing environment and select the answer that addresses the specific management and control issues of the given context.

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. barracouto 👍 8 Answered D
    When setting up a Bring Your Own Device (BYOD) program, the primary security concern is ensuring that personal devices, which may not be under the company's direct control, do not introduce security risks into the organization. Among the options provided, the most relevant concern is: D. Jailbreaking Jailbreaking refers to removing the manufacturer's restrictions on a device, which can compromise the security of the device. This makes it more susceptible to malware and unauthorized access, posing a significant risk to the company's network and data when such a device is connected.
  2. jennyka76 👍 3
    D Jailbreaking is the process of removing software restrictions that a device manufacturer has intentionally put in place. This allows users to gain more control over their device, such as: Installing custom firmware Installing third-party applications Choosing their operating system Getting apps from unofficial stores Turning their phone into a hotspot Changing the look and operation of their phone Changing phone settings at the administrator level
  3. dbrowndiver 👍 2 Answered D
    In this scenario, D. Jailbreaking is the correct answer because it directly affects the security of personal devices used in a BYOD program. Jailbreaking removes built-in security controls, making devices vulnerable to various threats, and is a primary concern for companies allowing personal devices to access corporate networks and data.
  4. Alexikaun 👍 1 Answered D
    Jailbreaking (or rooting) a device removes the manufacturer's restrictions, potentially exposing the device to security vulnerabilities and malicious software. This can compromise the security of the company's network and data.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide