A network administrator is setting up corporate email access on personal smartphones under a new Bring Your Own Device (BYOD) program. Enterprise policy mandates that corporate email, data, and associated app content remain encrypted in an isolated logical workspace so that the company can perform a selective wipe of corporate assets without affecting the employee's personal photos or applications. Additionally, incoming email synchronization must be encrypted using SSL/TLS over the standard secure port. Which of the following configurations best meets these requirements?
- Deploy Mobile Application Management (MAM) containerization and configure incoming email using IMAPS on port 993.Answer
- BEnroll all devices into Mobile Device Management (MDM) with full device wipe policies and configure incoming email using POP3 on port 110.
- CDeploy Mobile Application Management (MAM) containerization and configure incoming email using secure IMAP on port 143.
- DFilter access using International Mobile Subscriber Identity (IMSI) numbers at the gateway and configure incoming email using POP3S on port 995.
Answer
Deploy Mobile Application Management (MAM) containerization and configure incoming email using IMAPS on port 993.
Mobile Application Management (MAM) allows administrators to create a secure, encrypted container for corporate apps and data on personal (BYOD) devices. This ensures corporate emails and documents can be selectively wiped without wiping personal user content. Furthermore, IMAPS (IMAP over SSL/TLS) uses port 993 to ensure incoming email synchronization is encrypted end-to-end.
Step-by-Step Solution
Key Concept
Mobile Application Management (MAM) vs MDM and Secure Email Synchronization Ports