Question

Difficulty: MediumMobile Application Support and Security Settings

Match each enterprise mobile application security requirement or synchronization scenario on the left with the corresponding technical protocol, policy setting, or management scope on the right.

  • Restricting the manual installation of unverified third-party application packages (.apk files) on Android smartphones.Disabling application sideloading / Unknown Sources policy settings.
  • Securing incoming mobile email traffic using SSL/TLS encryption over standard dedicated port assignments.IMAPS using TCP port 993.
  • Removing corporate email and application data from a BYOD mobile device while leaving personal files intact.Selective wipe within a Mobile Application Management (MAM) container.
  • Providing full two-way push synchronization of mobile email, contacts, and calendar items over HTTPS.Exchange ActiveSync (EAS) protocol.

Answer

1. Restricting manual installation of unverified APKs matches with Disabling application sideloading / Unknown Sources policy settings.
2. Securing incoming mobile email traffic via SSL/TLS matches with IMAPS using TCP port 993.
3. Removing corporate app data while leaving personal files intact matches with Selective wipe within a Mobile Application Management (MAM) container.
4. Providing full two-way push synchronization of email, contacts, and calendar items matches with Exchange ActiveSync (EAS) protocol.
Each requirement correctly aligns with its corresponding technology: Sideloading restrictions block unauthorized APK installation; IMAPS on TCP port 993 provides encrypted incoming email retrieval; MAM selective wiping isolates and removes corporate data on BYOD endpoints; and Exchange ActiveSync handles multi-data real-time synchronization.

Step-by-Step Solution

1
Analyze security control scope for third-party application package installations.
Installing unapproved application files directly onto Android devices is known as sideloading, which is controlled via sideloading / unknown sources policies.
Security policies prevent malicious APK execution outside managed app stores.
2
Identify secure incoming mail protocols and default port numbers.
IMAPS encrypts incoming email using SSL/TLS over TCP port 993.
Standard unencrypted IMAP uses port 143, whereas secure IMAPS uses port 993.
3
Differentiate between Full Device Wipe (MDM) and Selective Wipe (MAM).
Selective wipe within a MAM container targets only enterprise data on BYOD devices.
MDM controls the whole device and performs full factory wipes, whereas MAM isolates corporate apps.
4
Determine the synchronization protocol supporting unified mail, contacts, and calendar sync.
Exchange ActiveSync (EAS) synchronizes all corporate PIM data types natively.
Standard POP3 or IMAP only synchronizes email messages, not calendar items or contacts.

Key Concept

Mobile Application Security and Mail Synchronization Protocols
Rate this question