SSCP Systems and Application Security Practice Question
A security administrator is configuring a mobile device management (MDM) policy for company-owned smartphones. The organization wants to ensure that if a device is lost or stolen, corporate data can be removed without affecting the user's personal data. Which of the following MDM capabilities should be enabled?
⚠ Common exam trap
The trap here is choosing full remote wipe as the solution, which would erase personal data and is not appropriate when personal data must be preserved.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Selective wipe of corporate data
Selective wipe is designed to remove only corporate data and settings from a mobile device, preserving personal data. This is essential for scenarios where devices are used for both work and personal purposes. It ensures that sensitive company information is not exposed if the device is lost or stolen, while not intruding on the user's personal data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Selective wipe of corporate data
Why this is correct
Selective wipe (or enterprise wipe) removes only corporate data and configurations from a device, leaving personal data intact. This meets the requirement of protecting corporate information while respecting user privacy. It is a standard MDM feature for BYOD or company-owned devices with personal use.
- ✗
Enforcing a strong screen lock PIN
Why it's wrong here
A strong PIN prevents unauthorized access but does not remove data if the device is lost. It is a preventive control, not a data removal mechanism. The scenario requires the ability to remove corporate data, so this is insufficient.
- ✗
Containerization of corporate applications
Why it's wrong here
Containerization separates corporate apps and data from personal, but it does not by itself remove data upon loss. It is a complementary control that can facilitate selective wipe, but the question asks for the capability to remove corporate data, which is selective wipe.
- ✗
Remote wipe of the entire device
Why it's wrong here
A full remote wipe erases all data, including personal information, which violates the requirement to preserve personal data. While it protects corporate data, it is too broad and would negatively impact the user. Selective wipe is needed instead.
Go deeper
Related to this question
About these practice questions
One of 971 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.