ISC2 Systems Security Certified Practitioner (SSCP) Practice Question
Your bank issues COPE phones and permits BYOD devices once they enroll in the MDM system. A new mobile app caches loan documents locally for offline work. Compliance mandates the cached files stay unreadable if a lost phone is powered off, yet users must not perform extra daily authentications. Which MDM control best satisfies these data-at-rest and usability requirements?
Require automatic deletion of all cached data whenever the device screen locks.
Enforce hardware-backed full-device encryption before the loan-document app can be installed.
Mandate always-on VPN use and block the app from storing any local cache.
Configure the loan-document app to prompt for a second passphrase every time it starts.
Requiring hardware-backed full-device encryption leverages the native encryption engines of modern Android and iOS handsets, protecting every bit on flash storage with AES keys that remain inaccessible until the normal device unlock. If a phone is lost and powered off, the loan-document cache stays unreadable, fulfilling compliance without adding daily steps. A second app passphrase adds user friction, wiping cache on every lock prevents offline work, and an always-on VPN with no caching disables offline access.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is hardware-backed full-device encryption?
Open an interactive chat with Bash
What is MDM and how does it work?
Open an interactive chat with Bash
Why is AES encryption commonly used in mobile security?
Open an interactive chat with Bash
ISC2 Systems Security Certified Practitioner (SSCP)
Systems and Application Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .