CyberCertPrepMobile Security FundamentalsMobile Security BasicsEASYFree question
A security trainer explains the concept of 'defense in depth' for mobile devices. An employee asks which single control would be most impactful if they could only implement one. What is the best answer?
- A.B. Keeping the operating system and apps updated to the latest versions, which closes known vulnerabilities that represent the vast majority of exploitable attack surface on mobile devices
- B.A. Installing a premium antivirus application on the device
- C.C. Enabling full-disk encryption, which prevents all unauthorized access
- D.D. Using a VPN at all times, which encrypts all network traffic
Why A is correct
If forced to choose a single control, keeping the OS and apps patched is the highest-impact mobile security measure. The majority of mobile device compromises exploit known, patched vulnerabilities in outdated software. Security updates close exploitable attack surface gaps. Antivirus has limited mobile efficacy and can be evaded. Full-disk encryption protects data at rest but not an active compromised device. A VPN protects network traffic but not local exploit-based attacks or malicious app behavior.
Know someone studying for Mobile Security Fundamentals? Send them this one.