Mobile Device Management Configuration: Secure Data Removal for Company Devices

Removing Company Data from a Personally Owned Phone without Touching Personal Data

Prev Question Next Question

Question

A new hire wants to use a personally owned phone to access company resources.

The new hire expresses concern about what happens to the data on the phone when they leave the company.

Which of the following portions of the company's mobile device management configuration would allow the company data to be removed from the device without touching the new hire's data?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

The correct answer is D. Storage segmentation.

Storage segmentation is a mobile device management (MDM) configuration that separates corporate data and applications from personal data and applications on a mobile device. This enables the company to remotely wipe or remove corporate data from the device without affecting the employee's personal data.

In this scenario, the new hire wants to use their personally owned phone to access company resources. By implementing storage segmentation, the company can create a separate container on the employee's device that contains only company data and applications. This container can be remotely wiped or removed without touching the employee's personal data.

Asset control refers to tracking and managing an organization's physical assets, such as laptops, smartphones, and tablets. It does not provide a way to remove corporate data from a personal device.

Device access control refers to controlling access to company resources based on device type, operating system, and other factors. It does not provide a way to remove corporate data from a personal device.

Storage lockout refers to temporarily or permanently disabling a device's storage. This would prevent both corporate and personal data from being accessed, but it is not a practical solution for an employee-owned device.

In summary, storage segmentation is the best option for allowing the new hire to use their personal device while ensuring the company's data can be removed without affecting the employee's personal data.