CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 667


Which of the following is the BEST control to minimize the risk of unauthorized access to lost company-owned mobile devices?

Show Answer
Correct Answer: AC

Device encryption is the best control to minimize the risk of unauthorized access to lost company-owned mobile devices. Encryption ensures that even if the device is lost or stolen, the data on it remains inaccessible without the proper decryption key. This provides a higher level of security compared to password or PIN protection, which can potentially be bypassed or guessed. Device tracking software and periodic backups are also important but do not directly address unauthorized access to the data on the device.

Discussion

5 comments
Sign in to comment
oldmagicOption: A
Jul 2, 2023

In these type of questions, Encryption is always the best answer

ChaBum
Mar 11, 2024

in the absence of password anybody who find the device can access it and therefore the data on it, so what's the point to encrypt if there is no password?

hohoOption: A
Jun 8, 2023

A, Device encryption ?,PIN Better?

hulisaniOption: C
Jun 11, 2024

The question is talking about control that prevent unauthorised person to access the devices so to me password or pin is the correct answer, if the question was talking about accessing data on the lost device then encryption was going to be the perfect.

hulisaniOption: C
Jun 11, 2024

he question is talking about control that prevent unauthorised person to access the devices so to me password or pin is the correct answer, if the question was talking about accessing data on the lost device then encryption was going to be the perfect.

SwallowsOption: A
Jul 7, 2024

While password/PIN protection (option C) is important for initial access control, device encryption (option A) is the superior control for minimizing the risk of unauthorized access to lost company-owned mobile devices due to its ability to protect data from unauthorized access even if physical possession of the device is compromised.