Question

A security analyst is reviewing the corporate MDM settings and notices some disabled settings, which consequently permit users to download programs from untrusted developers and manually install them. After some conversations, it is confirmed that these settings were disabled to support the internal development of mobile applications. The security analyst is now recommending that developers and testers have a separate device profile allowing this, and that the rest of the organization's users do not have the ability to manually download and install untrusted applications.

Which of the following settings should be toggled to achieve the goal? (Choose two.)

A. OTA updates
B. Remote wiping
C. Side loading
D. Sandboxing
E. Containerization
F. Signed applications

Answer 1

To prevent untrusted application installations among general users while allowing it for developers, the security analyst should disable 'Side loading' and enforce 'Signed applications' for the standard user profiles, while creating an exception for developers.

Step-by-step explanation:

To achieve the goal of restricting the ability to manually download and install untrusted applications for the general user population while allowing developers and testers to have that capability, the security analyst should recommend toggling the following two settings:

• C. Side loading
• F. Signed applications

Side loading refers to the installation of apps from sources other than the official app store, a process that can introduce security risks if not properly managed. By disabling side loading for the general user profile and allowing it only for developer profiles, the organization can maintain security while still supporting its development efforts. Signed applications ensure that the applications are certified and trusted; enforcing this setting for the general user base will prevent the installation of potentially malicious software. It is important to have these settings configured appropriately, as allowing the installation of untrusted applications can expose the organization to unnecessary risks.