Question

A security team at a defense contractor discovers that executives traveling internationally are being targeted by rogue base stations that force their smartphones to downgrade from 5G/LTE to 2G, enabling interception of voice and SMS traffic. Which control most directly mitigates this IMSI-catcher (Stingray) attack technique?

Accepted Answer

Configure devices to disable legacy 2G/GSM fallback and enforce mutual authentication over VPN for all voice and messaging

Answer

Require executives to use full-disk encryption on their mobile devices

Answer

Deploy a mobile device management (MDM) policy that enforces strong screen-lock passcodes

Answer

Enable SIM PIN protection and require biometric unlock on each device