Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 13 Discussion

Posted by Cammy on Apr 08, 2024 at 09:47 PM

Which of the following presents the GREATEST risk to corporate data pertaining to mobile device usage?

Suggested Answer: D

Replicating privileged access to a user's own mobile device presents the greatest risk to corporate data. This is because it potentially allows unauthorized access to sensitive information if the device is lost, stolen, or compromised. Privileged access means having elevated permissions that are typically reserved for administrators. When such access is available on a personal device, it bypasses many of the security controls that a company would normally have in place.

Option A, remote wipe, is actually a security feature that can protect data if a device is lost or stolen. Option B, lack of training, can increase risk but does not directly expose data like privileged access does. Option C, devices not obtained through corporate provisioning, can be a risk, but this risk is generally less than that of replicating privileged access.


Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
41 comments · newest first
NO
Noel 10 months ago
C is a problem, corporate devices are way more secure.
NE
Nettie 11 months ago
A remote wipe is just a safety feature, not a risk.
DE
Deeann 11 months ago
Surprised that people still use unapproved devices, that's risky!
LA
Lashunda 11 months ago
I think D is the biggest issue, too much access on personal devices.
AN
Annabelle 11 months ago
Definitely B, lack of training is a huge risk!
SA
Sanjuana 12 months ago
D seems really risky to me; replicating privileged access could lead to major data breaches if the device is compromised.
MY
Myrtie 12 months ago
I remember a practice question about provisioning, so I feel like C could be a significant risk too.
TR
Truman 12 months ago
I'm not sure about A; I thought remote wipe was a security feature, not a risk.
TA
Tamekia 1 year ago
I think option B makes sense because if users aren't trained, they might not follow security protocols.
PA
Pauline 1 year ago
I'm confident B is the right answer. End users not being trained is a huge security gap when it comes to mobile devices in the workplace.
NA
Natalya 1 year ago
I'm leaning towards C - the mobile device not being obtained through corporate provisioning. That lack of control seems like the biggest vulnerability.
TE
Tenesha 1 year ago
Option D about privileged access on personal devices seems like the biggest risk to me. That could really expose sensitive corporate data.
IL
Ilene 1 year ago
Hmm, I'm a bit unsure here. I'm trying to weigh the risks of remote wipe, lack of corporate provisioning, and privileged access on personal devices.
TI
Tina 1 year ago
This question seems straightforward, I think the answer is B - end users not being trained in mobile device management.
OS
Osvaldo 1 year ago
I'm confident that the correct answer is B. An Architecture Compliance review is all about ensuring the technical aspects of the project are on track and ready to move forward.
DA
Darrin 1 year ago
Ugh, I hate these types of questions. Calculus is not my strong suit. I'll do my best to work through it, but I'm probably going to have to guess on this one.
PH
Phillip 1 year ago
Hmm, I'm a bit stumped on this one. I know Divalproex Sodium can have some serious side effects, but I'm not totally sure which specific labs need to be monitored. I'll have to review my notes on this drug.
LO
Lottie 2 years ago
I disagree with I think B is the biggest risk as end users lacking training in mobile device management can lead to unintentional data leaks.
MA
Maryanne 2 years ago
I believe C is also a significant risk, if the mobile device is not obtained through corporate provisioning, it may not have necessary security measures.
JA
Jacob 2 years ago
I agree with allowing privileged access on personal devices could lead to data breaches.
TR
Tricia 2 years ago
I think the greatest risk is D, privileged access being replicated to the user's own mobile device.
PH
Phil 2 years ago
I disagree with Kimi, I think B is the biggest risk as end users lacking training in mobile device management can lead to unintentional data leaks.
KI
Kimi 2 years ago
I believe C is also a significant risk, if the mobile device is not obtained through corporate provisioning, it may not have necessary security measures.
VI
Virgie 2 years ago
I agree with Leonida, allowing privileged access on personal devices could lead to data breaches.
LE
Leonida 2 years ago
I think the greatest risk is D, privileged access being replicated to the user's own mobile device.
PA
Patrick 3 years ago
Definitely. I'm going with D as well. The other options are important, but they don't hold a candle to the risk of privileged access getting out there.
KR
Kristel 3 years ago
Haha, yikes! That must have been a fun conversation with the boss. But you're right, privileged access is the biggest issue here. Can't trust people to keep that stuff secure on their own devices.
NO
Norah 3 years ago
You guys are spot on. I remember one time our IT guy accidentally sent his login credentials to his personal email. That was a heart attack waiting to happen.
MA
Marget 3 years ago
Yeah, I'd go with D. Privileged access is just a massive security hole. Better to keep that stuff on company-issued devices that can be properly managed.
LE
Lenita 2 years ago
↳ replying to Marget
Definitely, privileged access on personal devices is a no-go.
DA
Dalene 2 years ago
↳ replying to Marget
I agree, D seems like the biggest risk.
EM
Emerson 2 years ago
↳ replying to Marget
It's definitely important to have control over how devices are obtained to ensure security measures are in place.
TR
Tracey 2 years ago
↳ replying to Marget
C) The mobile device is not obtained through corporate provisioning.
FR
Francene 2 years ago
↳ replying to Marget
That's a valid point. Without proper training, users can unknowingly put data at risk.
DE
Deonna 2 years ago
↳ replying to Marget
B) End users are not trained in mobile device management.
JA
Jacob 2 years ago
↳ replying to Marget
True, but I think having privileged access on personal devices is even riskier.
NA
Na 2 years ago
↳ replying to Marget
A) The mobile device may be subject to remote wipe.
FR
Francine 2 years ago
↳ replying to Marget
Yeah, I agree. That's a major risk for corporate data security.
CA
Catherin 2 years ago
↳ replying to Marget
D) Privileged access is replicated to the user's own mobile device.
SI
Simona 3 years ago
I agree with that. If an employee has access to sensitive corporate data on their personal device, that's a recipe for disaster. Remote wipe is important, but it's not as big of a risk as giving people too much access.
KA
Kanisha 3 years ago
This is a tricky question. I think the biggest risk is privileged access being replicated to the user's own mobile device. That's a huge security vulnerability waiting to happen.
0/2000 characters

Save Cancel