Mobile Data Security: Containerization vs Remote Wipe

SY0-701 By islever Editorial Last updated

Given a scenario, select mitigation techniques or controls to secure an enterprise environment.

Short answer

D Containerization isolates corporate data from personal data, ensuring that even if an attacker accesses the device, they cannot easily reach sensitive enterprise information.

Question

A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the following provides the best solution to increase mobile data security on all employees' company mobile devices?
  1. Application management
  2. Full disk encryption
  3. Remote wipe
  4. Containerization Correct Answer

Key Takeaways

The exam tests whether you prioritize immediate incident response (remote wipe) or architectural security controls (containerization) for ongoing protection.

This question explores the best method to secure mobile data when credentials are compromised, contrasting reactive remote wipe with proactive containerization.

Common mistake: Candidates often choose Remote Wipe because it addresses the immediate threat of the stolen device, ignoring the question's request for a solution that increases security on 'all' devices.

Expert Analysis

Why the Answer Is Correct

Containerization is the correct answer because it provides a structural control that isolates corporate data from personal data and the underlying OS. By using a secure container, the organization ensures that even if an attacker gains access to the device via valid credentials, they cannot easily access the segregated corporate data without breaking out of the container, which is significantly harder than accessing unencrypted data. This approach enhances security across the entire fleet of devices proactively.

Why the Other Options Are Wrong

Full Disk Encryption (B) is incorrect because once the user logs in with valid credentials, the disk is decrypted and accessible; encryption does not protect against authorized but malicious use. Remote Wipe (C) is a reactive measure that destroys data rather than securing it; while useful for lost devices, it does not 'increase security' in an architectural sense and results in data loss. Application Management (A) focuses on app lifecycle but does not inherently protect data at rest or in use within the device environment.

Community Comment Notes

Many community members argued for Remote Wipe, citing that encryption is useless once logged in, as seen in comments like "encryption means nothing if they are in using a username and password." Others pointed out that Remote Wipe is an immediate response, but missed the nuance of 'increasing security' on all devices. Some users correctly identified Containerization as the superior architectural control, noting it segregates work data to reduce risk even if the device is compromised.

Exam Strategy

When a question asks for the 'best solution to increase security' rather than 'immediate response,' look for proactive architectural controls like segmentation or encryption. If the scenario involves credential theft, assume that perimeter defenses like passwords have failed, and focus on limiting data exposure through isolation.

Frequently Asked Questions

Why is Full Disk Encryption not the best answer?

FDE protects data at rest, but once the user logs in with valid credentials, the data is decrypted and accessible to any application running on the device.

Is Remote Wipe ever the right answer for this scenario?

Remote Wipe is a reactive incident response action. The question asks for a solution to 'increase security,' which implies a proactive control like containerization.

More SY0-701 FAQ →

Community Votes

C
59%
B
41%

59% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 33 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 30 of 33

  1. a4e15bd 👍 23
    I would go with B. Here is the reasoning, for an immediate response to a compromised device, remote swipe may be the best option. But the question asks "What is the best solution to increase mobile data security on all employee's devices?" Implementing FDE across all company devices raises the baseline security for the entire organization ensuring that data on all devices is protected. With compromised credentials a remote swipe might even be too late, if you don't find out fast enough that the device has been stolen.
  2. b82faaf 👍 11 Answered B
    B. Full disk encryption (FDE). The question was not asking about the single phone that was stolen (in which case a remote wipe may work after the fact); rather, it asks for "the best solution to increase mobile data security on all employees' company mobile devices".
  3. 0ca8ee9 👍 7 Answered C
    Full disk encryption means nothing once the attacker logs in. Remote wipe is the most appropriate response.
  4. TriBiT 👍 6 Answered C
    encryption means nothing if they are in using a username and password - remote wipe is need to protect the organization
  5. 1f2b013 👍 4 Answered C
    Remote wipe allows an organization to erase all data on the device remotely, ensuring that even if a threat actor gains physical access and credentials, they cannot access the company data.
Show 25 more comments
  1. nesquick0 👍 4 Answered C
    C. Remote Wipe in this case B.(Full disk Encryption) is useless, since the attacker already logged-in so it has been decrypted.
  2. myazureexams 👍 3
    In that case, containerization would be the best single option. It separates work data from personal data, ensuring that even if a threat actor accesses personal data, they cannot reach the work data. However, it's important to note that this should be complemented with other security measures like strong passwords, two-factor authentication, and regular updates. Containerization and full disk encryption can help protect data on company mobile devices. Containerization separates work data from personal data, and full disk encryption secures data at rest. Additionally, remote wipe allows for deleting data if a device is lost or stolen. The question makes it seem like, we screwed up, what can we do moving forward to protect ALL mobile phones. So in that case you would go with any of the other choices. In the case for this particular phone. Remote wipe makes the most sense. If nothing else is already in place.
  3. jbmac 👍 3 Answered D
    The correct answer is: D. Containerization Explanation: Containerization is the best solution to enhance mobile data security in this scenario because it: Creates a secure, isolated environment for company data and applications on mobile devices. Ensures that even if a device is compromised, personal and corporate data remain segregated, reducing the risk to sensitive corporate data. Allows for secure access and management of corporate resources without impacting personal data on the device.
  4. EfaChux 👍 3 Answered D
    MDM containerization refers to the process of segregating personal and corporate data on personal devices by creating a logical container to enhance corporate data security. By using containerization, even if the thief gains access to device they will not able to access the official and confidential information on the device, also with containerization, remote wipe of the official information is possible.
  5. Norbe90 👍 3 Answered C
    Threat actor already has accessed the device using username and password, encryption is useless at this point. C is the correct one
  6. Mich06 👍 2
    'Data Protection: Full disk encryption (FDE) encrypts all data stored on a mobile device, ensuring that even if the device is lost or stolen, the data remains inaccessible without the proper authentication key (e.g., a password or PIN). This is crucial for protecting sensitive company information from unauthorized access' The answer is remote wipe because the device has already been accessed using the user name and password'
  7. Ty13 👍 2 Answered C
    C. Remote Wipe Anyone who understands MDM would be able to answer this immediately. Phones are already encrypted - whether it's Android or Apple - otherwise your phone would be a disastrously vulnerable computer. If someone steals a phone AND has your credentials, the device has already been pwned and you have no option but to remote wipe it and hopefully stop them from accessing any further info.
  8. 3dk1 👍 2 Answered D
    Even if a threat actor gains access to the device, they would still need to bypass additional authentication mechanisms to access the data within the container. IT administrators can enforce security policies within the container, such as restricting copy/paste functions, disabling screenshots, and requiring strong authentication.
  9. e157c7c 👍 2 Answered C
    To those picking FDE because you wouldn't wipe all users' phones, this is missing the boat. You are implementing a remote wipe solution, NOT wiping everyones' phones. Given the example provided, I can't see anything but C being correct here.
  10. viktorrdlyi 👍 2 Answered B
    The answer is B. The question is what should they do to increase the security o n employees phone. The question is not saying what should they do. with the stolen phone!!
  11. Justhereforcomptia 👍 2 Answered B
    Also voting for B, FDE is the best solution. Remote wipe is done after the fact of the infiltration, which might take time to do or even be feasible.
  12. nyyankee718 👍 2 Answered C
    Remote wipe, they already have the password
  13. Nehaltarek 👍 1 Answered B
    Answer: B the question here isa mind playing , the scenarios is on a stonelen device , however, the quation is asking about a security control on the rest of employee devices , not on the solen device according to ChatGPT: Full Disk Encryption (FDE): This ensures that all data stored on the device is encrypted, making it inaccessible without the correct authentication. Even if a threat actor gains physical access to the device, they won’t be able to read the data without the decryption key. This helps protect sensitive information from unauthorized access. Remote Wipe: Allows for the deletion of data on a stolen device, but it needs to be activated quickly after the device is stolen. If the device is not connected to the internet, remote wipe might not be effective.
  14. Anyio 👍 1 Answered B
    B. Full disk encryption Explanation: Full disk encryption ensures that all data on a mobile device is encrypted and cannot be accessed without proper authentication. Even if a device is lost or stolen, the threat actor cannot access the data without the encryption key, adding a critical layer of protection. Other Options: A. Application management: Manages apps on devices but does not directly secure the data stored on the device. C. Remote wipe: Allows erasing data on lost devices but is reactive, requiring the device to be online and detected. It is not a preventative measure for data security. D. Containerization: Segregates personal and corporate data but doesn't protect the entire device, leaving other areas vulnerable.
  15. c7b3ff0 👍 1 Answered C
    I'm gonna keep it short here because Ty already explained it perfectly, but it's not B. "If someone steals a phone AND has your credentials, the device has already been pwned" and remote wiping the stolen device is pretty much your only option. You just have to hope it gets reported and the security team gets to it fast enough. There are other measures they could have taken beforehand that would make the attacker having the username and password less devastating. This would be a big "oops" moment, all you can do is damage control.
  16. Linas312 👍 1 Answered D
    The actual answer is MDM, but not here A. irrelevant B. also irrelevant, the actor has already signed in, the encryption is useless at this point C. is more of reaction rather than preventive. Either its B even though technically wrong, or D which is usually paired with MDM.. too many questions like this on these "Theory" exams.. Going with D, closest to the actual answer for this situation and scenario
  17. NONS3c 👍 1 Answered C
    Remote wipe allows the company to erase all data from a lost or stolen mobile device remotely. This ensures that even if a threat actor has access to the device and login credentials, the sensitive company data can be deleted, rendering the device essentially useless from a data standpoint.
  18. paytenj10 👍 1
    It says "on ALL employees devices" You aren't going to full wipe every employees mobile devices when only one has been infiltrated. Full disk encryption will increase security going forward.
  19. RoRoRoYourBoat 👍 1 Answered C
    C. Remote wipe: This feature allows the company to remotely erase all data on a stolen or lost device, ensuring that sensitive information is not accessible to unauthorized users.
  20. nesquick0 👍 1 Answered C
    C. Remote wipe since full disk encryption does not protect the data after you sucessfully logged in with user and password also D. Containerization is not relatable.
  21. cyberWoof 👍 1 Answered B
    The condition is "solution to increase mobile data security on all employees' company mobile devices", and that solution is 'B' - FDE
  22. dhewa 👍 1 Answered B
    Key word here is on all employees company mobile phones, so why would you wipe everyone`s data when only one device was stolen.
  23. famuza77 👍 1
    for some reason I thought FDE only worked with Laptops, well in this case I would choose FDE too
  24. NONS3c 👍 1 Answered B
    because he talk about the future so B is correct
  25. 2d97894 👍 1 Answered B
    Key Word: "increase mobile data security"

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide