Mobile Operating System Features

iOS vs. Android

The big security implication: sideloading on Android increases malware exposure, so MDM commonly blocks installs from "unknown sources."

Screen Locks & Failed-Attempt Policies

Both platforms can erase the device after N failed unlocks (commonly 10), and iOS adds escalating lockout timers between wrong attempts. Enterprises push these limits through MDM.

Mobile Device Management (MDM)

MDM centrally secures and configures fleets of phones and tablets.

BYOD vs. corporate-owned

The key rule: on a BYOD device you perform a selective wipe that removes only company data and leaves the employee's personal photos and apps intact.

Location Services

Users grant location per app as Always, While Using, Ask Next Time, or Never; admins can restrict it via MDM. Note that turning off GPS still leaves approximate location available through cellular and Wi-Fi.

Core Device Operations

• Factory reset wipes all data/apps/settings to out-of-box state. iOS: Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. Android: Settings > System > Reset > Factory data reset. Used for decommissioning, resale, or clearing stubborn issues. On iOS you must first disable Activation Lock / Find My or the device stays tied to the prior Apple ID.
• Backup/restore: iCloud (auto over Wi-Fi while charging) or encrypted local Finder/iTunes backup; Android uses Google account backup or the maker's service.
• OS updates: iOS Settings > General > Software Update; Android Settings > System > System Update. MDM may stage updates to avoid breaking enterprise apps.

Email Configuration (ports matter)

Modern setups use OAuth 2.0 instead of storing a password in the mail client.

Worked scenario: A user reads mail on a phone and a laptop and wants new messages to appear on both. Choose IMAP, not POP3 — IMAP leaves messages on the server and synchronizes state across every device, while POP3 would pull mail down to whichever device fetched it first.

The Closed-vs-Open Security Story

Why the iOS/Android difference matters in practice is a recurring theme. Apple's closed ecosystem vets every App Store submission and ships updates to all eligible devices simultaneously, which shrinks the window where a known vulnerability stays unpatched. Android's openness is its strength and its risk: sideloading an APK from outside the Play Store bypasses Google's screening and is the most common way Android malware arrives, and update timing depends on the manufacturer and carrier, so older or budget Android phones may run months behind on security patches.

For a technician, that means the first hardening step on managed Android devices is to block installs from unknown sources, while on iOS the priority is enforcing prompt OS updates and a strong passcode.

Passcode Strength in Numbers

The exam likes concrete math on screen locks. A 4-digit PIN yields 10,000 possible codes, a 6-digit PIN yields 1,000,000, and an alphanumeric password explodes the keyspace far beyond either. That is why enterprise policy commonly mandates a 6-digit PIN at minimum or a full password, paired with an auto-wipe after a set number of failed attempts (often 10) and escalating lockout delays. Biometrics — fingerprint or IR facial recognition — are a convenience layer on top of, not a replacement for, the underlying passcode, because the device still falls back to the passcode after a reboot or several failed biometric reads.

Activation Lock and Decommissioning

A frequently missed operational detail: before a factory reset on an iPhone for resale or reassignment, you must turn off Find My / Activation Lock and sign out of the Apple ID. Skip that step and the device re-locks to the previous owner's Apple ID after the wipe, leaving the new user stranded at an activation screen. The Android equivalent is Factory Reset Protection, which demands the previously synced Google account credentials after a reset. Proper decommissioning therefore means: back up needed data, sign out of the cloud account, disable the activation/reset protection, and only then perform the factory reset.