Exam IIA-CIA-Part3 topic 2 question 137 discussion

Actual exam question from IIA's IIA-CIA-Part3

Question #: 137
Topic #: 2

A multinational organization allows its employees to access work email via personal smart devices. However, users are required to consent to the installation of mobile device management (MDM) software that will remotely wipe data in case of theft or other incidents.

Which of the following should the organization ensure in exchange for the employees' consent?

A. That those employees who do not consent to MDM software cannot have an email account.
B. That personal data on the device cannot be accessed and deleted by system administrators.
C. That monitoring of employees' online activities is conducted in a covert way to avoid upsetting them.
D. That employee consent includes appropriate waivers regarding potential breaches to their privacy.

Show Suggested Answer

Suggested Answer: D 🗳️

by KonradK at Feb. 11, 2024, 8:11 a.m.

Comments

Submit Cancel

34205ac

1 week, 1 day ago

Selected Answer: D

D is more universal and implicitly includes B

upvoted 1 times

...

KonradK

9 months, 3 weeks ago

Selected Answer: B

B is the right answer here

upvoted 1 times

Elvin

9 months, 1 week ago

Why B?

upvoted 2 times

KonradK

9 months ago

Org allows its employees to access work email via personal smart devices. Once employee installs MDM there's a consideration for a 2nd work environment and only that from this environment should be wiped out not all of the data including personal one. Thus I think that B is the right answer. System Admins shouldn't access and delete employee's personal data.

upvoted 1 times

...