vmartinez

Tomoka, the IT consultant, is explaining to one of their customers that starting from Android 10, Android devices must use File Based Encryption and are no longer able to use Full Disk Encryption, File Based Encryption provides better security capability. Do you know how File Based Encryption works?

 

• File Based Encryption allows an IT Admin to modify the encryption key and save it in a unique location in the file system, making it difficult for the attacker to find the key.
• “File Based Encryption allows different components in Android to be encrypted with different keys. This allows the work profile key to be ejected from memory while the personal profile is still in use.”
• All are correct.
• File Based Encryption allows IT admin to separate the encryption key from the device. The IT Admin can put the encryption key in their private cloud and let devices access the encryption key in the cloud before they can use the device.

 

Android provides flexibility to the ecosystem, which allows OEMs to build exclusive features on top of what Android provides. For example, ABC mobile is an OEM that has developed specific enterprise features built-in to the device, to differentiate their devices from another brand. However, one of the key challenges is the need for other ecosystem partners (like EMMs) to integrate these features, so they can be managed by the IT Admin (customer). What requirements need to be fulfilled by the OEM and/or the other ecosystem partners to address this challenge?

 

• ABC Mobile as an OEM needs to build APIs for EMM providers to develop and integrate with their software before Enterprise customers are able to use it. The availability of this feature varies depending on the EMM provider’s integration.
• ABC Mobile as an OEM needs to develop this feature with OEM config. With that, their features will be immediately available on every EMMs that supports managed configurations.
• ABC Mobile as an OEM has to be part of Android Enterprise Recommended program before they can create any exclusive features. Android Enterprise Recommended allows OEMs to use OEM Config features that Android Enterprise offers.
• ABC Mobile as an OEM can’t create exclusive features, if they want to create a new feature, they have to submit a feature request to Google. Once it is approved ,Google will make it available in all Android Devices.

 

A few years ago Google initiated Project Treble to further improve how Android was updated and secured. Which of the following statements correctly describes how Project Treble contributes to device security?

 

• Project Treble randomizes key locations in memory, meaning that exploits cannot be reused.
• Project Treble is a form of encryption for work profiles.
• Project Treble separates device specific software from the OS, making it easier to update the OS, so that devices benefit from security updates quicker.
• Project Treble reduces the number of processes that can access the SoC to three so that they are checked for integrity before executing.

 

 

What API level corresponds with Andorid 11.0?

 

• API level 27
• API level 20
• API level 30
• API level 34

 

Lina, the IT lead of Dodo Inc. decided to adopt a BYOD strategy for their Enterprise Mobility implementation to save operation costs, however she’s not really sure what is the preferred method to enroll BYOD devices into EMM. As the Android Enterprise Expert, what would you recommend to Lina as the preferred method to enroll her BYOD fleets into the corporate EMM?

 

• Zero-touch
• Manual: Install the EMM agent from the Google Play Store, login and enroll
• EMM Token
• QR Code

 

Nicky explains that Android is flexible and there are a few options for enterprises to host and publish their corporate applications on managed devices with managed Google Play. Which one of the following hosting and publishing methods are NOT supported by managed Google Play?

 

• Google-hosted private apps.
• Side-loaded by a business website.
• Publish public applications.
• Self hosted private apps on a business server.