CISSP Practice Question: A multinational corporation requires remote wipe capabilities and encryption for executive mobile…

Correct Answer: A. A Mobile Device Management (MDM) solution with full-device encryption and remote wipe capability.

Explanation (CISSP Manager Logic):

MDM provides a centralized administrative framework to enforce security policies across the mobile fleet, addressing both data at rest and device loss. This solution aligns with risk management goals by ensuring sensitive corporate data remains protected or can be destroyed if the physical asset is compromised.

By implementing this solution, you:

• Enforce mandatory encryption to protect data at rest.
• Mitigate data breach risks from lost hardware via remote wipe.
• Maintain centralized oversight and compliance for executive assets.

While the other options are relevant, they fall short because:

• B: VPNs only protect data in transit and do not secure stored data or provide device control.
• C: Firewalls manage network traffic but cannot encrypt local storage or perform remote data destruction.
• D: Containerization segregates data but often lacks the full-device encryption and total wipe capabilities required for high-risk devices.

Think like a manager:

Prioritize solutions that offer centralized control and comprehensive risk mitigation. Effective mobile security must address the entire data lifecycle, from storage to emergency disposal.