220-1102 Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Remote lock

  Why it's wrong here

  Remote lock does not delete the device's contents; it merely imposes an authentication barrier (e.g., a PIN, password, or biometric requirement) via a mobile device management (MDM) command. Although this may temporarily protect the data from casual access, the encrypted or unencrypted data remains physically present on the storage medium, and the lock can potentially be bypassed through OS vulnerabilities, forensic tools, or by a thief performing a factory reset that strips the lock without securely erasing the underlying data. Because the policy demands complete erasure, remote lock is insufficient and does not meet the requirement.

• ✓

  Remote wipe

  Why this is correct

  Remote wipe is the correct mechanism because it sends a secure command through the mobile device management (MDM) server to the handset instructing it to perform a factory reset or a cryptographic erase of all user data. A high-security remote wipe often deletes the encryption keys rather than overwriting every byte, making the data cryptographically unavailable and effectively unrecoverable even if the physical storage is later imaged. This process permanently destroys sensitive information on the device, satisfying the company policy's requirement for complete data erasure upon loss.

• ✗

  Geofencing

  Why it's wrong here

  Geofencing does not perform data deletion; it uses GPS, Wi-Fi, or cellular location data to define virtual boundaries that trigger conditional actions, such as locking the screen, disabling the camera, or sending an alert when the device crosses a boundary. While geofencing can be configured to react when a device leaves an authorized area, it merely initiates a policy action and lacks the ability to execute a comprehensive erase of the device's storage. In a loss scenario, the device might be powered off or outside cellular coverage, so the geofencing trigger may never fire, and even if it does, it cannot remotely delete all sensitive data.

• ✗

  Containerization

  Why it's wrong here

  Containerization separates an employee's personal data from corporate data by placing corporate resources and applications inside a cryptographically isolated, sandboxed container managed by an MDM solution. Although containerization allows an administrator to selectively wipe the corporate container when a device is lost, the underlying personal data and other non-containerized data remain intact on the device. Since the company's policy mandates that all employee smartphones—including non-containerized data—be completely erased, containerization fails to provide a mechanism to remotely erase the entire device as required.

Go deeper

Related to this question