Examkin

Question

Difficulty: HardMobile Application Support and Security Settings

A field sales representative uses a personal Android smartphone within a corporate Bring Your Own Device (BYOD) program. The organization's security officer requires that sensitive corporate emails and proprietary customer attachments remain encrypted at rest, isolated from personal storage, and protected against copying data into unauthorized personal applications. Furthermore, the corporate IT department must not hold permissions to inspect or remotely wipe the employee's personal photos or private applications. Which configuration setting or management strategy should the IT support technician implement on the device?

  1. Implement application containerization governed by Mobile Application Management (MAM) policies.Answer
  2. B
    Enroll the smartphone into a Mobile Device Management (MDM) profile enforcing full device storage encryption and unrestricted remote wipe permissions.
  3. C
    Configure the corporate mail profile to sync strictly over POP3 using SSL port 993.
  4. D
    Register the device's International Mobile Equipment Identity (IMEI) with the cellular carrier to restrict data access to approved SIM cards.

Answer

Implement application containerization governed by Mobile Application Management (MAM) policies.
Application containerization managed through Mobile Application Management (MAM) creates a secure logical boundary around business apps and data on a personal device. It allows IT administrators to apply Data Loss Prevention (DLP) controls—such as prohibiting data copying to unmanaged apps—and perform selective remote wipes of business content without inspecting or deleting the user's personal photos and applications.

Step-by-Step Solution

1
Analyze the operational and security requirements of the BYOD scenario.
Identified the need to protect corporate data at rest, restrict copy-paste actions into personal apps, and prevent IT from accessing or wiping personal user content.
BYOD environments require clear boundaries between corporate control and personal privacy.
2
Evaluate the management scopes of Mobile Application Management (MAM) versus Mobile Device Management (MDM).
Determined that MDM applies full-device policies and remote wipes (unsuitable for personal privacy), while MAM controls specific corporate apps and data containers.
MAM provides application containerization, data loss prevention (DLP), and selective wipe capability without taking over personal device storage.
3
Select the resolution that aligns with the corporate security mandate.
Configuring MAM containerization fulfills all encryption, isolation, and selective management criteria.
MAM policies isolate corporate workspace data while preserving personal user autonomy.

Key Concept

Mobile Application Management (MAM) and Application Containerization in BYOD Environments
Estimated Time:2m 0s
Rate this question

Topics

Mobile Application Support and Security Settings

More questions from this topic