How do you protect connected mobile devices on your network from cyber attacks?
Mobile and connected devices are becoming a way of life in the corporate world. Network/Systems and Cyber Security engineers have to be on the defensive regarding mobile and connected devices that enter their workplace. They don't know if a smartphone, for example, has a malicious app on an employee's phone and if unknowingly having that can compromise their networks or systems. This is a question that an interviewer will likely ask. They may go as far as asking what kind of setup you have at home for your connected devices. A hiring manager will ask this to see how well protected you are at home and if you apply these same practices and principles at work. It's important that you are aware of the types of attacks that can occur on mobile and connected devices. As an example, here's a list of potential topics that may come up during an interview.
"Since I also have a mobile phone and several connected devices at home and work, I do take extra precautions to make sure that what I load on my phone and devices is safe and virus free. I do this by researching the software or app before downloading it. I am also careful not to grant app permissions to access functions on my mobile device either. In my current role, I take the steps necessary to safeguard mobile devices and users against attacks. I have developed a checklist that I share with our employees to make sure they follow safe practices. Here's an example of my list:
1.Use strong/unique passwords
2.Add anti-virus software to devices
3.Review app permissions before giving access
4.Use two-step (multi-factor) authentication
5.Keep your software up to date on a regular basis
6.Disable features you may not use
1.)Mobile Malware
2.)Malicious Apps
3.)Data Leaks
4.)Phishing Attempts
5.)Machine Based Attacks"
"I have implemented several safe mobile device use practices in addition to an awareness program to keep our employees thinking about the importance of security threats as they use their mobile or connected devices. It's important to me to maintain a dynamic "immune system" for our networks and systems to ensure sensitive data is protected at all levels of our organization. As part of the awareness program, I conduct periodic training sessions called "Lunch & Learns" to talk about the various types of threats to mobile and connected devices that can occur. Each training session covers the latest updates on all the threats and how to protect their selves."
Before responding to the interviewer's question, you may want to ask a clarifying question. Are they asking about how you protect connected mobile devices on the organization's network, or are they interested in how you do this for your personal devices at home? Once you better understand the question, you can begin to answer by describing your techniques and why you use these. You don't need to go into great detail; just describe your overall strategy and any special measures you employ. The interviewer will ask you a follow-up question if they need more information or want to explore the topic in more detail.
Community answers are written by other candidates practicing this set. Reading how others frame the same question is one of the fastest ways to sharpen your own.
Anonymous Answer
By using a Mobile Device Management platform and having endpoint security software such as Sophos InterceptX. In addition to all security measures, you should normally take on all mobile devices such as geofencing, encryption, storage segmentation where applicable, and even the use of cloud technology to working data from being stored on the device.
Amanda's Feedback
Well done! Your answer is specific enough to assure the interviewer that you have expertise in protecting mobile devices from cyberattacks because you've listed specific software and additional security measure that help protect valuable information.
