Mobile Device Security for A+

This A+ topic focuses on technician-level mobile-device security controls used to protect data on phones and tablets. It covers practical choices: device encryption and screen locks, configuration profiles and patching, endpoint protection tools, locator/remote wipe/backup features, failed log-in/access restrictions, and the difference between MDM-driven controls and ownership-policy limits (BYOD vs corporate-owned). The topic intentionally excludes deep MDM architecture, mobile forensics, wireless protocol design, and OS-specific workstation security beyond the mobile context.

Start first lesson

6 lessons in this topic

Device Encryption and Screen-Lock Methods

Apply mobile encryption and screen-lock choices in practical device-protection scenarios.

Configuration Profiles and Patch Management

Use configuration profiles and keep both the mobile OS and installed apps updated as security controls.

Mobile Endpoint Protection Controls

Recognize and apply mobile endpoint security software and filtering controls at a support level.

Locator, Remote Wipe, and Remote Backup Features

Use mobile locator, remote wipe, and backup features when device loss, theft, or distrust makes response necessary.

Failed Log-in Restrictions and Mobile Access Control

Apply mobile failed log-in restrictions and related access-control choices to reduce repeated unauthorized access.

MDM, Ownership Models, and Profile Security Requirements

Distinguish centralized mobile management from ownership-policy decisions and profile security requirements.

Common mistakes to avoid

- "Encryption is optional and only affects passwords" - encryption protects stored user data, not just the login credential.

- "Profiles only apply to corporate devices" - profiles can be applied to any device if the owner consents or if device is enrolled in management. However, BYOD policies may limit what can be enforced.

- "Antivirus will catch all mobile threats" - mobile antivirus has limitations; platform app vetting and updates are also critical.

- "Wipe will always remove data immediately" - remote wipe often depends on the device being online; otherwise, the command is queued.