100-160 Question 3
Select 3A company has recently adopted a Bring Your Own Device (BYOD) policy, allowing employees to use personal devices to access corporate resources. As part of essential security principles, which measures should be implemented to maintain security in such an environment?
- A
Enforce strong password requirements on all devices accessing corporate resources
- B
Allow unrestricted access to corporate resources to support productivity
- C
Implement Mobile Device Management (MDM) to control and secure employee devices
- D
Disable two-factor authentication (2FA) on personal devices to simplify access
- E
Educate employees on secure usage and potential risks associated with personal devices
Show answer and explanation
Correct answers: A, C, E
Explanation
The essential security principles for handling BYOD environments include enforcing strong authentication mechanisms like passwords, implementing tools like Mobile Device Management (MDM) to maintain control and security over devices, and educating employees to recognize potential risks. These measures collectively reduce vulnerabilities while enabling secure access to corporate resources. Disabling 2FA or allowing unrestricted access contradicts these principles and can expose the organization to significant risks.
- A. Correct.
Strong password requirements are essential to prevent unauthorized access and ensure that corporate resources are adequately protected.
- B. Incorrect.
Unrestricted access to corporate resources increases the attack surface and goes against essential security principles, which emphasize access control and least privilege.
- C. Correct.
Mobile Device Management (MDM) is a critical tool in securing personal devices and ensuring compliance with organizational security policies.
- D. Incorrect.
Disabling two-factor authentication reduces security and increases the risk of unauthorized access, violating the principle of layered security.
- E. Correct.
Educating employees increases awareness of potential risks and helps them adopt secure practices, which is a fundamental aspect of essential security principles.