SSCP Systems and Application Security Practice Question
A security administrator is reviewing how mobile devices connect to corporate email and file shares. The organization wants to protect data if a device is lost and to prevent data leakage between personal and work applications. Which TWO controls should the administrator implement? (Choose two.)
⚠ Common exam trap
The trap here is selecting convenience features such as personal cloud backup or sideloading, which feel helpful but actually expand data exposure and defeat the stated goals.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enroll devices in a mobile device management solution with remote wipe
MDM with remote wipe protects data when a device is lost, and containerization isolates corporate apps and data from personal ones to stop leakage across the boundary. Together they address both parts of the requirement without forcing users to carry separate devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable full device backup to the user's personal cloud account
Why it's wrong here
Backing up to a personal cloud account moves corporate data outside the organization's control and often into a consumer service with no contractual protections. It increases leakage risk rather than reducing it, so it directly conflicts with the goals of protecting corporate data on lost devices.
- ✓
Enroll devices in a mobile device management solution with remote wipe
Why this is correct
MDM enrollment lets the organization enforce policy, monitor compliance, and trigger a remote wipe if a device is lost, directly addressing the data protection requirement. It also provides the management channel needed to push other controls such as passcode and encryption policies to enrolled devices.
- ✓
Configure containerization that separates corporate apps and data from personal apps
Why this is correct
Application containerization keeps work data inside an encrypted, managed container so personal apps cannot read it and copy-paste or file sharing across the boundary can be blocked. This satisfies the requirement to prevent leakage between personal and work contexts on the same device.
- ✗
Allow sideloading of applications from unknown sources
Why it's wrong here
Permitting sideloaded apps from unverified sources exposes the device to malware that can exfiltrate corporate data and bypass platform security checks. It weakens the security posture and makes both loss protection and data separation harder to guarantee, so it is not an appropriate control.
- ✗
Disable device encryption to improve application performance
Why it's wrong here
Turning off encryption leaves data readable if the device is lost or stolen and undermines the secure container that containerization relies on. Performance gains do not justify removing the primary protection for data at rest, and this choice contradicts the stated requirement.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 971-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.