Exam SY0-701 topic 1 question 376 discussion

Full Disk Encryption (FDE) ensures that all data stored on the device is encrypted, making it inaccessible without proper authentication (such as a password or biometric verification). If the mobile device is lost or stolen, the data remains secure because it is encrypted. This helps protect sensitive company data even if the device is no longer in the employee’s possession. Not A. MDM (Mobile Device Management): While MDM is excellent for managing devices, enforcing security policies, and remotely wiping or locking a lost device, it doesn't directly address the encryption of data. It's more focused on managing device configurations and enforcing security policies.

C. MDM can only enforce FDE policy but doesn't prevent data loss whereas FDE itself is a solution to prevent future data loss.

Which of the following *Provides* the best solution. Not is the best solution

A you can lock device or remotely wipe it

MDM solutions allow administrators to remotely manage and secure mobile devices, enforce security policies, and ensure compliance.

MDM prove uma proteção melhor

The solution in this scenario should focus on preventing future data loss. MDM directly tackles the issue by giving the company control over devices, allowing them to prevent data loss proactively through remote wipe capabilities, security enforcement, and monitoring. It’s a comprehensive solution for managing mobile device risks. So the answer can' t be FDE because FDE protects data on the device if it's lost, but it doesn’t prevent future data loss or help manage the device. It’s a reactive solution, not proactive.

MDM solutions are designed to manage and secure mobile devices. They can enforce policies such as: Remote wiping of lost or stolen devices. Requiring strong authentication. Enabling encryption. This directly addresses the risk of data loss by providing organizations with control over remote devices, even if they are lost.

Should be FDE. MDM will not help in case a lost/stolen device that is disconnected from internet and sim removed. FDE will still provide protection in that case.

Full Disk Encryption (FDE) is the best solution to prevent data loss in this scenario. It encrypts all data stored on the device, including the operating system, applications, and user data. This ensures that even if the device is lost or stolen, the data remains inaccessible to unauthorized individuals.

While several measures can help mitigate data loss from lost or stolen devices, the best solution to prevent future data loss in this scenario is a combination of Full Disk Encryption (FDE) and Mobile Device Management (MDM), with a strong emphasis on remote wipe capability within the MDM solution.

Mobile Device Management (MDM) is a solution specifically designed to manage, monitor, and secure mobile devices, such as smartphones and tablets, that access company data. MDM allows administrators to enforce security policies on these devices, such as requiring encryption, enforcing password requirements, and remotely wiping devices in the event of loss or theft. This would be the best solution to prevent future data loss in a scenario where an employee loses a mobile device containing sensitive company data

*Mobile Device Management Data Loss Prevention Full Disk Encryption Endpoint Detection Response

Mobile device management (MDM)