CompTIA Security+ (SY0-601) — Question 546

A security team received the following requirements for a new BYOD program that will allow employees to use personal smartphones to access business email:

• Sensitive customer data must be safeguarded.
• Documents from managed sources should not be opened in unmanaged destinations.
• Sharing of managed documents must be disabled.
• Employees should not be able to download emailed images to their devices.
• Personal photos and contact lists must be kept private.
• IT must be able to remove data from lost/stolen devices or when an employee no longer works for the company.

Which of the following are the best features to enable to meet these requirements? (Choose two.)

Answer options

• A. Remote wipe
• B. VPN connection
• C. Biometric authentication
• D. Device location tracking
• E. Geofencing
• F. Application approve list
• G. Containerization

Correct answer: A, G

Explanation

The correct answers are A (Remote wipe) and G (Containerization) because they directly address the need to secure sensitive data and manage access to company documents. Remote wipe allows IT to erase data from lost or stolen devices, while containerization keeps personal data separate from corporate data, ensuring privacy and compliance with the outlined requirements. The other options do not sufficiently meet all the specified needs.