hardMultiple Select
CISA Practice Question: Which THREE of the following are common…
Which THREE of the following are common challenges when implementing a bring-your-own-device (BYOD) policy that affect information systems operations? (Select exactly 3.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Difficulty in enforcing data encryption and remote wipe capabilities
Options A, D, and E are correct. BYOD introduces security risks such as difficulty enforcing data encryption and remote wipe (A), incompatibility between corporate apps and various platforms (D), and increased risk of malware from unmanaged devices (E). Option B is an advantage, not a challenge. Option C is a potential benefit, not a common challenge.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Difficulty in enforcing data encryption and remote wipe capabilities
Why this is correct
On personally owned hardware, the organisation lacks administrative control, so enforcing encryption and triggering remote wipes is legally and technically constrained. This satisfies the stem's operations challenge by creating gaps in data protection and breach containment.
- ✗
Reduced hardware procurement costs for the organization
Why it's wrong here
Lower hardware procurement cost is a financial benefit of BYOD, not an operational challenge affecting information systems. It is the correct consideration when justifying BYOD on cost grounds, but the question asks for operational difficulties such as support, patching and data leakage.
- ✗
Increased employee productivity due to device familiarity
Why it's wrong here
Productivity gains are a benefit of BYOD, not an operational challenge, so this cannot be selected. It is tempting because device familiarity genuinely does raise output, and that outcome would be the correct answer if the stem asked for advantages rather than implementation difficulties.
- ✓
Incompatibility between corporate applications and various device platforms
Why this is correct
BYOD introduces heterogeneous operating systems and hardware, so corporate applications built for standardised platforms may not run or render correctly. This satisfies the stem's operations challenge by increasing support overhead and disrupting service delivery across the mixed device estate.
- ✓
Increased risk of malware infections due to unmanaged devices
Why this is correct
Unmanaged personally owned devices sit outside corporate endpoint controls, so patching, antivirus and configuration baselines cannot be enforced. This directly satisfies the stem's operations challenge by widening the attack surface and raising malware infection likelihood across the BYOD estate.
Go deeper
Related to this question
About these practice questions
One of 934 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.