CompTIA Security+ (SY0-601) — Question 782

A company recently experienced a significant data loss when proprietary information was leaked to a competitor. The company took special precautions by using proper labels; however, email filter logs do not have any record of the incident. An investigation confirmed the corporate network was not breached, but documents were downloaded from an employee's COPE tablet and passed to the competitor via cloud storage. Which of the following is the best mitigation strategy to prevent this from happening in the future?

Answer options

• A. User training
• B. CASB
• C. MDM
• D. EDR

Correct answer: C

Explanation

The correct answer, C (MDM), is effective because it helps manage and secure employee devices like COPE tablets, ensuring that sensitive data is not improperly shared. Options A (User training) and B (CASB) may help, but they do not specifically address device management. Option D (EDR) focuses on detecting threats on endpoints but does not provide the necessary control over mobile devices used for corporate data.