Certified Ethical Hacker (CEH) Practice Question

Containerization-sometimes called a secure container, workspace, or Android work profile-creates a logically isolated area on the mobile device where corporate applications and data are stored with separate encryption keys. Because the business data resides only inside this managed container, administrators can enforce policies such as data-at-rest encryption and perform a selective (corporate-only) wipe without affecting the user's personal information. Mobile VPN split-tunneling controls network paths, not local data storage; OTA provisioning concerns initial configuration delivery; and 802.1X NAC governs network authentication rather than on-device data segregation. None of those alternatives ensure both isolation and targeted wiping of enterprise data.