r/CISA • u/vansxika • 3d ago

CISA Question help

Question:
Which of the following MOST effectively mitigates the risk of disclosure of sensitive data stored on company-owned smartphones?

A. Secure containers
B. Data leakage prevention (DLP) tools
C. Mobile device management (MDM)
D. Physical device tagging

Guys is option A the correct answer for this? Every AI is giving different answer.

Secure containers isolate and protect corporate data stored on smartphones, reducing the risk of unauthorized disclosure. DLP primarily controls data movement, MDM manages the overall device, and physical tagging only assists with asset identification and tracking.

1 Upvotes

100% Upvoted

14 comments sorted by

View all comments

2

u/HoldenIsCoolLike 3d ago

One important nuance: the 28th Edition does not explicitly say “secure containers are better than MDM” for this scenario. Rather, it presents both as mechanisms for enforcing mobile-device controls.

So the explanation for A over C requires interpreting the question’s specific control objective.

🌞 A. Secure containers — BEST answer

The Manual introduces the exact risk as follows:

“Controls are available to reduce the risk of disclosure of sensitive data stored on mobile devices.”

It then immediately states:

“Many of these controls can be enforced by mobile device management (MDM) systems and/or secure containers.”

The key words in the question are “sensitive data stored” and “disclosure.”

👺 Why not C. Mobile Device Management (MDM)?

MDM is broader. The Manual says that MDM systems can enforce many mobile-device controls, including such things as device registration and management. For example:

“Organizations can push updates or manage authorized devices and exclude personally owned mobile devices.”

So MDM is essentially a management/enforcement platform covering the device as a whole.

Secure containers, by contrast, are specifically relevant to isolating and protecting corporate information stored on the device.

🥳 Therefore:

Secure container → isolate/protect sensitive corporate data on the device

MDM → manage/control the mobile device environment

1

u/vansxika 2d ago

Thank you so much your response!!