Exam CISM topic 1 question 258 discussion

B.. Separating Critical Company data and applications from other third party applications and data might be a better approach. Since the enterprise data will be in a secured container.

I think the answer is C. Pre approving personal devices for corporate use can include installation of containers, remote discovery/wipe and other necessary security measures.

The correct answer is B. Using containerized software. Explanation: Among the options provided, using containerized software is the best way to strengthen the security of corporate data on a personal mobile device. Containerization involves creating isolated environments on a device to separate corporate data and applications from personal data and apps. B. Using containerized software: Containerization ensures that corporate data and applications are isolated within a secure container on the personal mobile device. This prevents data leakage and minimizes the risk of unauthorized access to corporate information even if the device is compromised.

B is good , but i think its too technical for the exam . I vote D.

pre-approved devices will be tested and more secure.

B. Using containerized software

B. For sure, the question is about "security of corporate data", only B can ensure data not ex filtrated from the device as it is being "contained". Other answers do not necessarily address the request in question.

MFA sin duda

D. Implementing multi-factor authentication, not B as in my earlier comment. Implementing multi-factor authentication adds an additional layer of security to the authentication process, requiring users to provide multiple factors of identification to access corporate data on their personal mobile devices. This can include something the user knows (e.g., a password), something the user has (e.g., a mobile device or token), or something the user is (e.g., biometric information). By implementing multi-factor authentication, even if the user's password is compromised, an additional factor is required to gain access to the corporate data, making it significantly more difficult for unauthorized individuals to gain unauthorized access.

D. Implementing multi-factor authentication Implementing multi-factor authentication adds an additional layer of security to the authentication process, requiring users to provide multiple factors of identification to access corporate data on their personal mobile devices. This can include something the user knows (e.g., a password), something the user has (e.g., a mobile device or token), or something the user is (e.g., biometric information). By implementing multi-factor authentication, even if the user's password is compromised, an additional factor is required to gain access to the corporate data, making it significantly more difficult for unauthorized individuals to gain unauthorized access.

All of the listed options can strengthen the security of corporate data on a personal mobile device, but using containerized software is the BEST option.

B is best.

b.containerised software aka work profile in android platforms

I think B. "Using containerized software" can enable protection (and keeps monitoring/control) of the security of corporate data, isolating from the personal data.

MFA in my opinion