CyberCertPrepMobile Security FundamentalsApp Sandboxing & PermissionsEASYFree question
A helpdesk technician sets up an Android device for a factory floor worker. The worker should only ever use one specific inventory management app. Which Android feature achieves this complete restriction?
- A.A. Screen Pinning (App Pinning), which the user can exit by pressing Back and Recent simultaneously
- B.B. Lock Task Mode (Kiosk Mode) configured via a Device Policy Controller, which prevents exit from the designated app without device admin credentials
- C.C. Guest Mode with only the inventory app installed in the guest profile
- D.D. Android Enterprise work profile configured to hide all personal apps
Why B is correct
Lock Task Mode (also known as Kiosk Mode) is an Android Enterprise feature where a Device Policy Controller (DPC) uses DevicePolicyManager.setLockTaskPackages() to specify which apps can be shown. The user cannot exit Lock Task Mode without device admin credentials. Screen Pinning is similar but user-escapable (the user can exit by pressing Back + Recent). Guest Mode is a user-level feature without kiosk enforcement. Work profiles segregate work and personal apps but don't lock to a single app.
Know someone studying for Mobile Security Fundamentals? Send them this one.