SSCP Systems and Application Security Practice Question
A mobile device management (MDM) administrator at a healthcare company needs to ensure that a physician's personally owned smartphone can access patient records through the corporate email application, but the administrator must be able to remotely erase only the corporate email data and its encryption keys if the device is lost, without deleting the physician's personal photos and apps. Which MDM capability should the administrator configure?
⚠ Common exam trap
The trap here is assuming that any remote wipe capability erases only corporate data, when a full-device wipe destroys personal content as well.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable selective wipe, also called enterprise wipe, which removes only corporate email data and associated keys.
Selective wipe, also known as enterprise wipe, is the MDM feature that removes only corporate data and its encryption keys from a personally owned device. It preserves the user's personal content, making it the correct choice for BYOD scenarios. Full-device wipe, passcode policies, and copy-paste restrictions do not provide the required granular remote erasure of corporate email data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable selective wipe, also called enterprise wipe, which removes only corporate email data and associated keys.
Why this is correct
Selective wipe, or enterprise wipe, is designed for BYOD scenarios where the organization manages only the corporate container. It removes corporate email, attachments, and the encryption keys protecting that data while leaving personal photos and apps intact. This satisfies the requirement to remotely erase only corporate data if the device is lost.
- ✗
Configure a full-device remote wipe that removes all data after a predefined number of failed unlock attempts.
Why it's wrong here
A full-device remote wipe erases everything on the phone, including the physician's personal photos, messages, and applications. This violates the requirement to preserve personal data and would likely deter participation in the BYOD program. Full wipe is appropriate only for corporate-owned devices or when the device itself is considered a total loss and the personal data destruction is contractually acceptable.
- ✗
Enroll the device in a mobile application management (MAM) policy that blocks copy and paste between apps.
Why it's wrong here
Blocking copy and paste reduces data leakage between applications, but it does not remove corporate data from a lost device. MAM policies control how apps interact, while the scenario requires the ability to erase corporate email data and its keys remotely. Data-loss prevention alone does not satisfy the selective wipe requirement.
- ✗
Apply a device-level passcode policy that requires a six-digit PIN and disables the camera application.
Why it's wrong here
A passcode policy and camera restriction harden the device but do not provide any remote erasure capability. If the phone is lost, the corporate email data remains on the device until the passcode is defeated. This control addresses access control and data leakage, not the selective removal of corporate information required in the scenario.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.